Lucene search
SolarwindsOrion Platform
4 matches found
CVE-2021-3109
The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.
4.9CVSS5.4AI score0.01717EPSS
CVE-2021-35238
User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
4.8CVSS5.3AI score0.00207EPSS
CVE-2020-35856
SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page.
4.8CVSS5.2AI score0.01023EPSS
CVE-2019-12863
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.
4.8CVSS5.3AI score0.01855EPSS