PT-2020-13834 · Solarwinds · Solarwinds Orion

Alert3 + 1 · Published 2020-06-24 · Updated 2020-07-07 · CVE-2020-14006

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Solarwinds Orion versions 2019.4.1

Description The issue allows for cross-site scripting (XSS) attacks. XSS is a type of attack where an attacker injects malicious code into a website, which is then executed by the user's browser. This can lead to unauthorized access to sensitive data or taking control of the user's session.

Recommendations For Solarwinds Orion version 2019.4.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-14006

Affected Products

Solarwinds Orion

References · 4

• 🔥 https://gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894 · Exploit
• https://osv.dev/vulnerability/CVE-2020-14006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14006 · Security Note
• https://t.me/cvenotify/4633 · Telegram Post