HIGH🇵🇱 Wersja polska

CVE-2015-2284

CVSS 10.0v2.0pub. 2015-03-24upd. 2026-05-06

userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Solarwinds Firewall Security Manager

    APP
    Solarwinds
    ≤ 6.6.5
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEFirewall
CWE
References

Related vulnerabilities

CVE-2025-40551CRITICAL9.8⚠ KEVPL ✓same vendor

RCE przez deserializację w SolarWinds Web Help Desk — bez uwierzytelnienia

CVE-2025-26399CRITICAL9.8⚠ KEVPL ✓same vendor

RCE przez deserializację AjaxProxy w SolarWinds Web Help Desk (nieuwierzytelniony)

CVE-2024-28987CRITICAL9.1⚠ KEVPL ✓same vendor

SolarWinds Web Help Desk – hardcoded credential umożliwia zdalny dostęp

CVE-2024-28986CRITICAL9.8⚠ KEVPL ✓same vendor

RCE przez Java Deserialization w SolarWinds Web Help Desk

CVE-2021-35211CRITICAL9.0⚠ KEVPL ✓same vendor

RCE w SolarWinds Serv-U — podatność Remote Memory Escape