CVE-2020-14006

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.
References
Link Resource
https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894 Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:solarwinds:orion_network_performance_monitor:2019.4:hotfix2:*:*:*:*:*:*
cpe:2.3:a:solarwinds:orion_web_performance_monitor:2019.4.1:*:*:*:*:*:*:*

Information

Published : 2020-06-24 07:15

Updated : 2020-07-06 19:04


NVD link : CVE-2020-14006

Mitre link : CVE-2020-14006


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

solarwinds

  • orion_network_performance_monitor
  • orion_web_performance_monitor