Unscored CVE-2020-13169 EUVD-2020-5441GHSA-32q2-gv5x-j2pp

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerab…

Published Sep 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

References

https://support.solarwinds.com/SuccessCenter/s/
https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-1_release_notes.htm#NewFeaturesOrion