Today > | 1 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-29003

April 18, 2024, 1:04 p.m.

CVSS Score

7.5 / 10

Product(s) Impacted

SolarWinds Platform

Description

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction.

Weaknesses

Date

Published: April 18, 2024, 10:15 a.m.

Last Modified: April 18, 2024, 1:04 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@solarwinds.com

CVSS Data

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

Base Score

7.5

Exploitability Score

Impact Score

Base Severity