medium4.8
CVE-2019-12863
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.
Impact
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Netpath | Version 1.1.4 |
| Solarwinds | Network Performance Monitor | Version 12.4 |
| Solarwinds | Orion Platform | Version 2018.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-12863-stored-html-injection-vulnerability-in-solarwinds-orion-platform-2018-4-hf3-npm-12-4-netpath-1-1-4/
- https://www.solarwinds.com/network-performance-monitor
- https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-12863-stored-html-injection-vulnerability-in-solarwinds-orion-platform-2018-4-hf3-npm-12-4-netpath-1-1-4/
- https://www.solarwinds.com/network-performance-monitor