PT-2017-19003 · Solarwinds · Solarwinds Network Performance Monitor

Publicado 2017-10-02 · Atualizado 2018-10-09 · CVE-2017-9537

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SolarWinds Network Performance Monitor version 12.0.15300.90

Description The issue concerns a persistent cross-site scripting (XSS) flaw in the Add Node function. This allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.

Recommendations For SolarWinds Network Performance Monitor version 12.0.15300.90, consider disabling the Add Node function until a patch is available to prevent exploitation of the XSS flaw.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-9537

Produtos afetados

Solarwinds Network Performance Monitor

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-9537 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9537 · Nota de Segurança
• http://securityfocus.com/archive/1/541262/100/0/threaded · Nota
• http://securityfocus.com/bid/101071 · Nota