Solarwinds Storage Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Solarwinds Storage Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2015-5371 — CVSS 10.0 (critical): The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via…
• CVE-2015-7838 — CVSS 10.0 (critical): ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via…
• CVE-2012-2576 — CVSS 9.8 (critical): SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2…