CVE-2020-14005

High · 8.8

CVSS

8.8

EPSS

14.3%

Published

Jun 24, 2020

CISA due date

—

The record

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

Affected packages

Ecosystem	Package	Introduced	Fixed