Summary
Ein Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Daten zu manipulieren, und potenziell um falsche Informationen darzustellen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 2
-
Medium 5.4
SolarWinds Observability Self-Hosted XSS Vulnerability
SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.
-
Medium 4.8
SolarWinds Observability Self-Hosted Open Redirection Vulnerability
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication …
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Platform release notes vom 2025-11-17
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-4-1_release_notes.htm