GCVE-110-NCSC-2024-239

Advisory PublishedCVSS 8.1/10

Vulnetix · Advisory published June 7, 2024

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Weaknesses (CWE)

CWE-682Incorrect CalculationCWE-325Missing Cryptographic StepCWE-385Covert Timing ChannelCWE-476NULL Pointer DereferenceCWE-125Out-of-bounds ReadCWE-942Permissive Cross-domain Policy with Untrusted DomainsCWE-190Integer Overflow or WraparoundCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-416Use After FreeCWE-704Incorrect Type Conversion or CastCWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Risk Scores

CVSS 3.1

8.1/10

High · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
solarwinds_	solarwinds_platform	—	—
solarwinds	solarwinds_platform_	—	—
solarwinds_	solarwinds_platform_	—	—

Aliases

CVE-2017-3736 CVE-2018-0732 CVE-2018-0737 CVE-2019-1559 CVE-2020-1971 CVE-2021-23840 CVE-2021-3712 CVE-2021-4321 CVE-2022-0778 CVE-2023-0215 CVE-2023-0286 CVE-2024-28996 CVE-2024-28999 CVE-2024-29004

References

advisory

Browse GCVE Records

71,925 records in the GCVE database · Updated July 13, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON