Lucene search
HistoryMay 20, 2024 - 7:15 p.m.
CVE-2024-29000
solarwinds
cross-site scripting
web console
vulnerability
high-privileged user
user interaction
7.9 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.
Related
vulnrichment
vulnrichment
CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability
2024-05-20 18:26:18
cve
cve
CVE-2024-29000
2024-05-20 19:15:08
cvelist
cvelist
CVE-2024-29000 SolarWinds Platform Reflected XSS Vulnerability
2024-05-20 18:26:18
nessus
nessus
SolarWinds Platform 2024.0 < 2024.1.1 Multiple Vulnerabilities XSS
2024-04-19 00:00:00
7.9 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.0%
Related for NVD:CVE-2024-29000