Veille CVE

Recherche « SolarWinds Observability Self-Hosted »

6 CVE

Critique 1 Élevée 2 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SolarWinds Observability Self-Hosted » ✕
  1. CVE-2026-28330 4.6 Moyenne

    SolarWinds Observability Self-Hosted

    SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.

  2. CVE-2026-28329 6.4 Moyenne

    SolarWinds Observability Self-Hosted

    SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations.

  3. CVE-2026-28328 8.8 Élevée

    SolarWinds Observability Self-Hosted

    SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions.

  4. CVE-2026-28325 8.8 Élevée

    SolarWinds Observability Self-Hosted

    SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.

  5. CVE-2026-28324 9.8 Critique

    SolarWinds Observability Self-Hosted

    SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

  6. CVE-2026-28301 4.8 Moyenne

    SolarWinds Observability Self-Hosted

    A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.