medium5.4
CVE-2020-14007
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
Impact
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Orion Network Performance Monitor | Version 2019.4 |
| Solarwinds | Orion Web Performance Monitor | Version 2019.4.1 |