Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: SolarWinds Orion Platform 2020.2.6 HF1 Clear all filters
TI-2021-14133 CVE-2021-35240 · GHSA-ch69-82p3-hfw4

Stored XSS via Help Server settings

Priority LOW 31

A security researcher stored XSS via a Help Server setting.

CVSS 3.1MEDIUM 6.5 Adjacent network High privileges User interaction EPSS 0.01074 Published 2021-08-31 Fixed in 2020.2.6 HF1 CWE-79
TI-2021-14132 CVE-2021-35239 · GHSA-rrm3-2q9w-fc44

Stored XSS in Maps text box hyperlink Vulnerability

Priority LOW 35

A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.

CVSS 3.1HIGH 7.5 Adjacent network Low privileges User interaction EPSS 0.01037 Published 2021-08-31 Fixed in 2020.2.6 HF1 CWE-79
TI-2021-14116 CVE-2021-35222 · GHSA-gxq2-v4pr-j3v6

Resource.aspx Reflected Cross-Site Scripting Vulnerability

Priority MEDIUM 46

This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02614 Published 2021-08-31 Fixed in 2020.2.6 HF1 CWE-79