Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um Daten zu manipulieren, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.
Product
SolarWinds Platform (ehemals "Orion") ist eine IT Performance-Monitoring Plattform.
Vulnerabilities 3
-
High 8.8
SolarWinds Observability Self-Hosted broken authorization schema
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.
-
Medium 6.4
SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.
-
Medium 4.6
SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authentic…
Revision history
-
#1
Initiale Fassung
References
-
SolarWinds Platform 2026.4.1 release notes vom 2026-10-27
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2026-4-1_release_notes.htm
-
GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-HQGX-66XG-F35H
-
GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-4M33-X2C3-2WFR
-
GitHub Security Advisory vom 2026-10-27
https://github.com/advisories/GHSA-46G5-Q9V5-87X4