Lucene search

SolarWindsCVELIST:CVE-2024-29000

HistoryMay 20, 2024 - 6:26 p.m.

CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability

2024-05-2018:26:18

CWE-79

SolarWinds

www.cve.org

solarwinds

xss

vulnerability

user interaction

7.9 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SolarWinds Platform ",
    "vendor": "SolarWinds",
    "versions": [
      {
        "status": "affected",
        "version": "2024.1 and Previous Versions "
      }
    ]
  }
]

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1-1_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2024-29000

7.9 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-29000