CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerability.
SolarWinds Orion Authentication Bypass Vulnerability. SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands.
- CISA KEV-listed (remediation due 2022-05-03)
- EPSS 94.3% (100.0% percentile)