Firetruck

CVE-2020-10148

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
orion_platformsolarwinds / orion_platform2019.4affected
orion_platformsolarwinds / orion_platform2020.2affected
orion_platformsolarwinds / orion_platform2020.2.1affected
Orion PlatformSolarWinds / Orion Platform2019.4 HF 5affected
Orion PlatformSolarWinds / Orion Platform2020.2 HF 1affected
Orion PlatformSolarWinds / Orion Platform2020.2 without hotfixaffected