Vulnerability Database

309,469

Total vulnerabilities in the database

CVE-2012-2576

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field.

Published: Dec 20, 2017
Updated: Nov 9, 2025
CVE: CVE-2012-2576
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
solarwinds / backup_profiler	-	5.1.2
solarwinds / storage_profiler	-	5.1.2
solarwinds / storage_manager	-	5.1.2

http://www.exploit-db.com/exploits/18818
http://www.exploit-db.com/exploits/18833
http://www.securityfocus.com/bid/51639
http://www.solarwinds.com/documentation/storage/storagemanager/docs/ReleaseNotes/vulnerability.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/72680

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo