SolarWinds
Transparency
Breakdown
| Subprocessor list | published; no entries could be read | 0 / 30 |
| Processing locations | no list | 0 / 8 |
| Purposes | no list | 0 / 7 |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | not found | 0 / 5 |
| Vulnerability disclosure | 5 / 5 | |
| Pages still reachable | 8 / 8 | |
| Total | 44 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For SolarWinds's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/solarwinds"><img src="https://thirdpartyindex.com/badge/solarwinds.svg" alt="SolarWinds transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/solarwinds)No tracked subprocessors.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center | snapshot | ||
| Subprocessor list | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Security advisories | snapshot |
Subprocessors
None extracted.
Listed as a subprocessor by (5)
Purposes as each company states them.
Bullhorn bullhorn.com Cloud logging services and management
Impartner impartner.com aggregation and alerting to
InfluxData influxdata.com Service log management
Krisp krisp.ai Logging and monitoring; Papertrail is a cloud-based log management service that simplifies the process of collecting, monitoring, and analyzing logs from various systems, applications, and services.
WatchGuard Technologies watchguard.com Monitoring and cloud-based log management for DNSWatch.
Security record
What public security catalogs list for SolarWinds, in their words.
Known exploited vulnerabilities
11 vulnerabilities in SolarWinds's software that CISA lists as exploited in the wild.
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2026-28318 | Serv-U | SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability | |
| CVE-2025-26399 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability used by ransomware | |
| CVE-2025-40536 | Web Help Desk | SolarWinds Web Help Desk Security Control Bypass Vulnerability | |
| CVE-2025-40551 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | |
| CVE-2024-28987 | Web Help Desk | SolarWinds Web Help Desk Hardcoded Credential Vulnerability | |
| CVE-2024-28986 | Web Help Desk | SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability | |
| CVE-2024-28995 | Serv-U | SolarWinds Serv-U Path Traversal Vulnerability | |
| CVE-2021-35247 | Serv-U | SolarWinds Serv-U Improper Input Validation Vulnerability | |
| CVE-2016-3643 | Virtualization Manager | SolarWinds Virtualization Manager Privilege Escalation Vulnerability | |
| CVE-2020-10148 | Orion | SolarWinds Orion Authentication Bypass Vulnerability |
1 more
| CVE | Product | Vulnerability | Listed |
|---|---|---|---|
| CVE-2021-35211 | Serv-U | SolarWinds Serv-U Remote Code Execution Vulnerability used by ransomware |
Source: CISA Known Exploited Vulnerabilities catalog (evidence)
Changes
None since tracking began.