CVE-2024-28999— SolarWinds Platform Race Condition Vulnerability
Quick assessment
Affected
SolarWinds SolarWinds Platform
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SolarWinds Platform是美国SolarWinds公司的一个统一监控、可观察性和服务管理平台。 SolarWinds Platform存在安全漏洞，该漏洞源于容易受到影响Web控制台的竞争条件的攻击。
Public Exploits 1
ExploitDB · 1
EDB-52055 [webapps]
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-28999
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SolarWinds Platform Race Condition Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: CVE Program / CVE List V5
Vulnerability Title
SolarWinds Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SolarWinds Platform是美国SolarWinds公司的一个统一监控、可观察性和服务管理平台。 SolarWinds Platform存在安全漏洞，该漏洞源于容易受到影响Web控制台的竞争条件的攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2024.1.1 and previous versions | - |
|
II. Public POCs for CVE-2024-28999
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Exploit for CVE-2024-28999 SolarWinds Platform Race Condition Vulnerability - login page | https://github.com/HussainFathy/CVE-2024-28999 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-28999
请登录查看更多情报信息。
Other References for CVE-2024-28999 (2)
IV. Related Vulnerabilities
Same product: SolarWinds Platform
-
CVE-2024-52611
SolarWinds Platform Information Disclosure Vulnerability -
CVE-2024-52612
SolarWinds Platform Reflected Cross-Site Scripting Vulnerabi -
CVE-2024-45717
SolarWinds Platform Cross- Site Scripting Vulnerability -
CVE-2024-45715
SolarWinds Platform Edit Function Cross-Site Scripting Vulne -
CVE-2024-45710
SolarWinds Platform Uncontrolled Search Path Element Local P
Same vendor: SolarWinds
-
CVE-2024-29004
SolarWinds Platform Stored XSS Vulnerability -
CVE-2024-28072
Arbitrary File Overwrite Vulnerability -
CVE-2024-29003
SolarWinds Platform Cross Site Scripting Vulnerability -
CVE-2024-29001
SolarWinds Platform SWQL Injection Vulnerability -
CVE-2024-28076
SolarWinds Platform Arbitrary Open Redirection Vulnerability
Same weakness: CWE-362
-
CVE-2026-105112
Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-grou -
CVE-2026-104855
Wasmtime: Preemption and traps during bulk operations enable -
CVE-2026-39601
WordPress Booking Calendar plugin <= 11.8.4 - Race Condition -
CVE-2026-104057
Podgrab Unauthenticated DoS via Concurrent Map Access in Web -
CVE-2026-103282
Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invi
V. Comments for CVE-2024-28999
No comments yet