CVE-2017-9537

Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2017-10-03

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Network Performance Monitor (Solarwinds)

References

• http://www.securityfocus.com/archive/1/541262/100/0/threaded
• http://www.securityfocus.com/bid/101071