CVE-2026-28330

4.6 Moyenne

Publiée le 20/10/2026 à 19:17 · Modifiée le 20/10/2026 à 21:59 · En attente d'analyse NVD · Source : psirt@solarwinds.com

Description

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.

Traduire en français

Produits concernés

SolarWinds Observability Self-Hosted

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.6 Moyenne	psirt@solarwinds.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28330

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories