Stored and DOM XSS in QoE Applications: Orion Platform 

(CVE-2022-36965)

Download PDF

Security Advisory Summary

Insufficient sanitization of inputs in QoE application input field could lead to stored and DOM based XSS attack. This issue is fixed and is part of the latest release for SolarWinds Platform (2022.3)


Affected Products

  • Orion Platform 2022.2 and earlier

Fixed Software Release


Acknowledgments

  • Shashank Chaurasia

Advisory Details

Severity

7.1 High

Advisory ID

First Published

09/28/2022

Fixed Version

CVSS Score