Summary
Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in SolarWinds Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 1
-
High 7.0
SolarWinds Platform Cross- Site Scripting Vulnerability
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction.
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Platform 2024.4.1 release notes vom 2024-12-03
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-4-1_release_notes.htm
-
NIST Vulnerability Database vom 2024-12-03
https://nvd.nist.gov/vuln/detail/CVE-2024-45717