CVE-2020-14007

Solarwinds Orion with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4 allows XSS via a name of an alert definition...

CVE-2020-14007

CVE-2020-14007 affects SolarWinds Orion: XSS via the name of an alert definition in Web Console WPM 2019.4.1 and Orion Platform HF4 / NPM HF2 2019.4. The vulnerability is caused by insufficient validation of client-supplied data in the WEB application, enabling crafted input to execute script on ...