目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

SolarWinds 厂商漏洞列表 / CVE 中文分析 186

SolarWinds 厂商相关 186 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

SolarWinds 主要提供 IT 基础设施监控与管理软件，其核心产品 Orion 平台广泛用于企业网络运维。历史漏洞多涉及远程代码执行、身份验证绕过及 SQL 注入，累计收录 166 条 CVE。2020 年爆发的供应链攻击事件尤为瞩目，攻击者通过篡改软件更新植入恶意代码，导致全球数千家机构数据泄露，凸显了第三方组件信任链的安全风险，促使行业加强软件供应链审查机制。

Top products by SolarWinds: Access Rights Manager Serv-U SolarWinds Platform Web Help Desk Orion Platform SolarWinds Observability Self-Hosted Kiwi Syslog Server Database Performance Analyzer Patch Manager Network Configuration Manager Network Performance Monitor Observability Self-Hosted SolarWinds Platform ServU Database Performance Analyzer (DPA) SolarWinds Kiwi CatTools Server & Application Monitor (SAM) Orion Virtual Infrastructure Monitor Orion Job Scheduler Dameware Mini Remote Control Service Service Desk Kiwi Syslog NG SolarWinds Serv-U Serv-U Managed File Transfer Server and Serv-U Secured FTP DPA Pingdom NPM Hybrid Cloud Observability (HCO)/ SolarWinds Platform SQL Sentry
CVE ID 标题 CVSS 风险等级 Published
CVE-2021-35245 SolarWinds Serv-U File Server 安全漏洞 — Serv-U FTP CWE-284 8.4 High 2021-12-06
CVE-2021-35237 Solarwinds Kiwi Syslog Server 安全漏洞 — Kiwi Syslog Server CWE-1021 5.0 Medium 2021-10-29
CVE-2021-35236 Solarwinds Kiwi Syslog Server 安全漏洞 — Kiwi Syslog Server CWE-614 3.1 Low 2021-10-27
CVE-2021-35235 Solarwinds Kiwi Syslog Server 安全漏洞 — Kiwi Syslog Server CWE-11 5.3 Medium 2021-10-27
CVE-2021-35233 Solarwinds Kiwi Syslog Server 配置错误漏洞 — Kiwi Syslog Server CWE-16 5.3 Medium 2021-10-27
CVE-2021-35231 Solarwinds Kiwi Syslog Server 代码问题漏洞 — Kiwi Syslog Server CWE-428 6.7 Medium 2021-10-25
CVE-2021-35230 Kiwi CatTools Installation Wizard 路径遍历漏洞 — Kiwi CatTools CWE-22 6.7 Medium 2021-10-22
CVE-2021-35228 SolarWinds Database Performance Analyzer 跨站脚本漏洞 — SolarWinds 5.5 Medium 2021-10-21
CVE-2021-35227 Pivotal Software RabbitMQ 代码问题漏洞 — Access Rights Manager CWE-79 4.7 Medium 2021-10-21
CVE-2021-35225 SolarWinds Orion Platform 安全漏洞 — NPM 5.0 Medium 2021-10-21
CVE-2021-35214 Solarwinds SolarWinds Pingdom 代码问题漏洞 — Pingdom 4.8 Medium 2021-10-12
CVE-2021-35217 Solarwinds Orion Platform 代码问题漏洞 — Orion Platform 8.9 High 2021-09-08
CVE-2021-35218 Solarwinds Orion Patch Manager Web Console 代码问题漏洞 — Patch Manager CWE-502 8.9 High 2021-09-01
CVE-2021-35216 Solarwinds Orion Platform 代码问题漏洞 — Patch Manager CWE-502 8.9 High 2021-09-01
CVE-2021-35215 Solarwinds Orion Platform 代码问题漏洞 — Orion Platform CWE-502 8.9 High 2021-09-01
CVE-2021-35238 Solarwinds Orion Platform跨站脚本漏洞 — Orion Platform CWE-79 4.8 Medium 2021-09-01
CVE-2021-35212 Solarwinds Orion Platform SQL注入漏洞 — Orion Platform 8.9 High 2021-08-31
CVE-2021-35223 SolarWinds Serv-U File Server 安全漏洞 — Serv-U CWE-20 8.5 High 2021-08-31
CVE-2021-35213 Solarwinds Orion Platform 安全漏洞 — Orion Platform CWE-284 8.9 High 2021-08-31
CVE-2021-35240 Solarwinds Orion Platform 跨站脚本漏洞 — Orion Platform CWE-79 6.5 Medium 2021-08-31
CVE-2021-35239 Solarwinds Orion Platform 跨站脚本漏洞 — Orion Platform CWE-79 7.5 High 2021-08-31
CVE-2021-35222 SolarWinds Orion Platform 跨站脚本漏洞 — Orion Platform CWE-79 8.0 High 2021-08-31
CVE-2021-35221 SolarWinds Orion Platform 安全漏洞 — Orion Platform CWE-284 6.3 Medium 2021-08-31
CVE-2021-35220 SolarWinds Orion Platform 命令注入漏洞 — Orion Platform 8.1 High 2021-08-31
CVE-2021-35219 SolarWinds Orion Platform 安全漏洞 — Orion Platform 6.0 Medium 2021-08-31
CVE-2021-32076 SolarWinds Web Help Desk 安全漏洞 — Web Help Desk CWE-290 5.3 Medium 2021-08-26
CVE-2021-35211 SolarWinds Serv-U FTP Server 缓冲区错误漏洞 — Serv-U Managed File Transfer Server and Serv-U Secured FTP 9.0 Critical 2021-07-14
CVE-2021-31474 SolarWinds Network Performance Monitor 代码问题漏洞 — Network Performance Monitor CWE-502 9.8 - 2021-05-21
CVE-2021-31475 SolarWinds Orion Job Scheduler 安全漏洞 — Orion Job Scheduler CWE-732 8.8 - 2021-05-21
CVE-2021-27277 Solarwinds Orion Virtual Infrastructure Monitor 代码问题漏洞 — Orion Virtual Infrastructure Monitor CWE-502 7.8 - 2021-04-22

本页汇总了 SolarWinds 厂商截至目前公开的全部 186 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。