CVE-2019-9546

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 1, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-95475.3In Storage Performance Development Kit (SPDK) before 19.01, a malicious vhost client (i.e., virtual machine) could carefully construct a cirCVE-2019-954810.0Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.CVE-2019-95498.8An issue was discovered in PopojiCMS v2.0.1. It has CSRF via the po-admin/route.php?mod=user&act=addnew URI, as demonstrated by adding a levCVE-2019-95504.8DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS.CVE-2019-95514.8An issue was discovered in DOYO (aka doyocms) 2.3 through 2015-05-06. It has admin.php XSS.CVE-2019-95529.8Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI.CVE-2019-95536.1Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.CVE-2019-95546.1In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/CVE-2019-95555.3Sagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK that is generated from a 2-part wordlist of knCVE-2019-95565.4FiberHome an5506-04-f RP2669 devices have XSS.CVE-2019-95576.1Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must CVE-2019-95586.1Mailtraq WebMail version 2.17.7.3550 has Persistent Cross Site Scripting (XSS) via the body of an e-mail message. To exploit the vulnerabili
CVE-2019-9546: Critical severity, CVSS 9.8 | Vulnix