The April 2025 Security Update Review

April 08, 2025 | Dustin Childs CONTINUE READING
SolarWinds Access Rights Manager: One Vulnerability to LPE Them All
Blog post

SolarWinds Access Rights Manager: One Vulnerability to LPE Them All

CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud
Blog post

CVE-2024-30043: Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud

Finding Deserialization Bugs in the SolarWinds Platform
Blog post

Finding Deserialization Bugs in the SolarWinds Platform

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor
Blog post

CVE-2022-38108: RCE in SolarWinds Network Performance Monitor

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation
Blog post

CVE-2021-26420: Remote Code Execution in SharePoint via Workflow Compilation

CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict
Blog post

CVE-2021-28474: SharePoint Remote Code Execution via Server-Side Control Interpretation Conflict

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability
Blog post

CVE-2021-31181: Microsoft SharePoint WebPart Interpretation Conflict Remote Code Execution Vulnerability

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint
Blog post

CVE-2021-27076: A Replay-Style Deserialization Attack Against SharePoint

Three More Bugs in Orion’s Belt
Blog post

Three More Bugs in Orion’s Belt

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform
Blog post

Three Bugs in Orion’s Belt: Chaining Multiple bugs for Unauthenticated RCE in the SolarWinds Orion Platform