exploitDog

CVE-2025-26391

Опубликовано: 18 нояб. 2025

Источник: nvd

CVSS3: 5.4

CVSS3: 5.4

EPSS Низкий

Описание

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

Ссылки

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-4-1_release_notes.htm
Release Notes
Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-26391
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:observability_self-hosted:*:*:*:*:*:*:*:*

Версия до 2025.4.1 (исключая)

EPSS

Процентиль: 21%

0.00068

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-rmmr-w34p-g372

CVSS3: 5.4

github

3 месяца назад

SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.

EPSS

Процентиль: 21%

0.00068

Низкий

5.4 Medium

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79