Medium WID-SEC-2025-2343 1 CVE

SolarWinds SWOSH: Schwachstelle ermöglicht Offenlegung von Informationen

Published Oct 20, 2025 · Updated Oct 20, 2025 · de-DE

Vendor: SolarWinds Product: Platform Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Platform SWOSH ausnutzen, um Informationen offenzulegen.

Product

SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.

Vulnerabilities 1

Medium 5.4

CVE-2025-26392

SolarWinds Observability Self-Hosted SQL Injection Vulnerability

SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.

SolarWinds Observability Self-Hosted

Oct 21, 2025

Revision history

2025-10-20 #1
Initiale Fassung

References

SolarWinds Platform 2025.4 release notes vom 2025-10-20
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4_release_notes.htm