SolarWinds Platform Reflected XSS Vulnerability 

(CVE-2024-29000)

Download PDF

Security Advisory Summary

The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

Affected Products

  • SolarWinds Platform 2024.1 and previous versions

Fixed Software Release

Acknowledgments

  • Lidor Levi

Advisory Detail

Severity

7.9 High

Advisory ID

First Published

04/18/2024

Last Updated

05/20/2024

Fixed Version

CVSS Score