SolarWinds Kiwi Cattools vulnerabilities

2 CVEs affecting SolarWinds Kiwi Cattools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45713, published 2024-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-45713, published 2024-10-17. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes.
CVE-2021-35230, published 2021-10-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker could gain escalated privileges by inserting an executable into the path of…