CVE-2020-10148 SolarWinds Orion
SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.
- CVSS
- not scored
On CISA’s exploited list
SolarWinds Orion Authentication Bypass Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known