99 matches found
CVE-2026-28329
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...
CVE-2026-28330
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...
CVE-2026-28328
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...
CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...
EUVD-2026-105179
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...
CVE-2026-28330
The SolarWinds Observability Self-Hosted platform is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). This flaw allows authenticated attackers to inject malicious content or JavaScript into the system. The injected script is then displayed or executed in the browsers of oth...
CVE-2026-28330 SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting XSS vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages...
CVE-2026-28329 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...
EUVD-2026-105178
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...
CVE-2026-28329 SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)
SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery SSRF vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations...
CVE-2026-28329
SolarWinds Observability Self-Hosted is affected by a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows authenticated attackers to force the application server to transmit requests to attacker-controlled or internal destinations . The vulnerability is associated with CWE-918 and ...
CVE-2026-28328 SolarWinds Observability Self-Hosted broken authorization schema
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...
CVE-2026-28328
SolarWinds Observability Self-Hosted is impacted by a broken authorization schema (CWE-863). This vulnerability allows low-privileged users to access and modify information that falls outside of their assigned permissions. The issue results in a HIGH base severity (CVSS 3.1 score of 8.8), with si...
CVE-2026-28328 SolarWinds Observability Self-Hosted broken authorization schema
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...
EUVD-2026-105175
SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions...
PT-2026-118504
Name of the Vulnerable Software and Affected Versions SolarWinds Observability Self-Hosted affected versions not specified Description A broken authorization schema allows low-privileged users to access and modify information that exceeds their assigned permissions. Recommendations At the moment,...
SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities
The version of SolarWinds Observability Self-Hosted installed on the remote host is prior to 2026.2.3. It is, therefore, affected by multiple vulnerabilities: - An insufficient verification of data authenticity vulnerability that could allow an unauthenticated, remote attacker to execute arbitrar...
Vulnerabilities in SolarWinds Observability Self-Hosted
SolarWinds has identified vulnerabilities in SolarWinds Observability Self-Hosted. These vulnerabilities enable unauthorized remote code execution. One vulnerability arises from deserializing unreliable data during the use of a specific communication mode within the software. Another vulnerabilit...
CVE-2026-28324
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected...
CVE-2026-28325
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode...