Solarwinds Log And Event Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Solarwinds Log And Event Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-5198 — CVSS 8.8 (high): SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing…
• CVE-2017-5199 — CVSS 8.8 (high): The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing…
• CVE-2014-5504 — CVSS 7.5 (high): SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the…
• CVE-2015-7839 — CVSS 7.5 (high): SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to…
• CVE-2015-7840 — CVSS 7.5 (high): The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute…