CVE-2020-7984: SolarWinds N-central

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

SolarWinds N-central before 12.1 SP1 HF5 and 12.2 before SP1 HF2 allows remote attackers to retrieve cleartext domain admin credentials from the Agent & Probe settings, and obtain other sensitive information. The attacker can use a customer ID to self register and read any aspects of the agent/appliance configuration.

Affected products

• SolarWinds N-central: before 12.1.1.404 (fixed in 12.1.1.404); from 12.2, before 12.2.1.280 (fixed in 12.2.1.280)

Published 2020-01-26. Last modified 2026-06-17.