SolarWinds Orion Authentication Bypass Vulnerability
Overdue
SolarWinds / Orion
CWE-288
Description
SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.
Required Action
Apply updates per vendor instructions.
Additional Information
- Catalog Version
- 2025.01.24
- Catalog Released
- Jan. 24, 2025
- Days Until Due
- 0 days
- Last Updated
- 8 months, 1 week ago