SolarWinds Server And Application Monitor vulnerabilities

3 CVEs affecting SolarWinds Server And Application Monitor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-47508, published 2023-02-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1500, published 2015-02-16. Medium severity, CVSS 6.8. EPSS: 8.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to…
CVE-2015-1501, published 2015-02-16. Medium severity, CVSS 6.8. EPSS: 7% chance of exploitation in the next 30 days. The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a…
CVE-2022-47508, published 2023-02-15. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing…