Description (CNA)
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SolarWinds / SolarWinds Observability Self-Hosted | affected 2026.2.3 and all previous versions |
CWE
CWE-79
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28330
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
ADP enrichment
No English description supplied.
No references supplied.