CVE-2024-45717
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
The SolarWinds Platform was susceptible to an XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction.
Risk Assessment
An authenticated attacker could execute script in the victim's browser, potentially leading to session theft or unauthorized actions.
Recommendation
Update SolarWinds Platform to a patched version and implement XSS protection measures.
Other vulnerabilities in SolarWinds Platform
See all- CVE-2023-3622Medium
Access control bypass vulnerability in the SolarWinds platform that allows an underprivileged user to read arbitrary resources.
- CVE-2023-33229Low
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.
Original NVD description (English source)
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS