CVE-2018-13442

SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2019-07-16

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Network Performance Monitor (Solarwinds)

References

• https://labs.nettitude.com/blog/cve-2018-13442-solarwinds-npm-sql-injection/