Skip to content
OpenAdvisories

Product · SolarWinds

SolarWinds Observability Self-Hosted

10 known vulnerabilities.

SolarWinds Observability Self-Hosted at a glance

Last 12 months
7
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 3 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202630
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202620
Feb 202600
Jan 202600
Dec 202500
Nov 202520
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202520
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

10 results · Feed

  • Medium 4.6

    SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability

    SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authentic…

  • Medium 6.4

    SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)

    SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.

  • High 8.8

    SolarWinds Observability Self-Hosted broken authorization schema

    SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.

  • Medium 5.9

    SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability

    SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

  • Medium 6.1

    SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability

    SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

  • Medium 4.8

    SolarWinds Observability Self-Hosted Open Redirection Vulnerability

    SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication …

  • Medium 5.4

    SolarWinds Observability Self-Hosted XSS Vulnerability

    SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

  • High 7.8

    SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability

    SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vul…

  • High 7.1

    SolarWinds SWOSH DOM-based reflective XSS Vulnerability

    SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.

  • Medium 4.8

    SolarWinds SWOSH Open Redirection Vulnerability

    SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication …