Solarwinds » Log And Event Manager » 5.4.0 : Security Vulnerabilities, CVEs,
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
Max CVSS
8.8
EPSS Score
0.29%
Published
2017-03-24
Updated
2019-10-03
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh.
Max CVSS
8.8
EPSS Score
0.04%
Published
2017-03-24
Updated
2019-10-03
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
Max CVSS
7.5
EPSS Score
1.95%
Published
2015-10-15
Updated
2016-12-03
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL.
Max CVSS
7.5
EPSS Score
94.00%
Published
2014-09-04
Updated
2014-09-08
4 vulnerabilities found