Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Solarwinds Subscribe
Filtered by product Managed Service Provider Patch Management Engine
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-12608 1 Solarwinds 1 Managed Service Provider Patch Management Engine 2020-05-15 9.3 HIGH 7.8 HIGH
An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds MSP\SolarWinds.MSP.CacheService\config\. This can lead to code execution by changing the CacheService.xml SISServerURL parameter.