HIGH🇵🇱 Wersja polska

CVE-2024-29004

CVSS 7.1v3.1pub. 2024-06-04upd. 2025-02-26

The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L

  • Solarwinds Platform

    APP
    Solarwinds
    < 2024.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2024-45717HIGH7.0ten sam produkt

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information se...

CVE-2024-45715HIGH7.1ten sam produkt

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit functi...

CVE-2024-45710HIGH7.8ten sam produkt

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerabi...

CVE-2024-28996HIGH7.5ten sam produkt

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is ...

CVE-2024-29000HIGH7.9ten sam produkt

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affect...