PT-2017-19003 · Solarwinds · Solarwinds Network Performance Monitor
CVE-2017-9537
·
Publicado
2017-10-02
·
Atualizado
2018-10-09
CVSS v3.1
4.8
Média
| Vetor | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SolarWinds Network Performance Monitor version 12.0.15300.90
Description
The issue concerns a persistent cross-site scripting (XSS) flaw in the Add Node function. This allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.
Recommendations
For SolarWinds Network Performance Monitor version 12.0.15300.90, consider disabling the Add Node function until a patch is available to prevent exploitation of the XSS flaw.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Solarwinds Network Performance Monitor