Unscored CVE-2010-4828 EUVD-2010-4793GHSA-vmjv-mxvq-6g4x

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to in…

Published Aug 24, 2011 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.

References

42486 third-party-advisory
8349 third-party-advisory
20101207 Multiple XSS in Solarwinds Orion NPM 10.1 mailing-list
orion-network-multiple-xss(63956) vdb-entry
45257 vdb-entry