CVE-2026-28330
CVE-2026-28330 · SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.
CVSS 4.6 · Moyenne · EPSS 0,3%
- Publication
- Mise à jour
Produits et versions concernés
solarwinds observability self-hosted
- Versions du logiciel
- 2026.2.3 and all previous versions: Concernée
Aucun correctif publié
Sources originales
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28330
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
- https://nvd.nist.gov/vuln/detail/CVE-2026-28330