CVE-2020-13169

CRITICAL

9.0

CVSS Severity Score

EPSS Score0.1470%

EPSS Percentile17.62th

Published2020年9月17日

Last Modified2024年11月21日

Vulnerability Description

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

Affected Platforms (CPE)

📦

Solarwinds

Orion Platform

< 2020.2.1

References & Advisories

🔗 https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-1_release_notes.htm#NewFeaturesOrion

🔗 https://support.solarwinds.com/SuccessCenter/s/