CVE-2012-2577: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2577?
CVE-2012-2577 is classified as a medium severity vulnerability that allows for multiple cross-site scripting attacks.
How do I fix CVE-2012-2577?
To fix CVE-2012-2577, upgrade SolarWinds Orion Network Performance Monitor to version 10.3.1 or later.
What are the affected versions for CVE-2012-2577?
CVE-2012-2577 affects SolarWinds Orion Network Performance Monitor versions prior to 10.3.1, including versions 7.8.5 through 10.2.
How does CVE-2012-2577 impact my system?
CVE-2012-2577 can allow remote attackers to inject arbitrary web scripts or HTML into the application, potentially compromising user safety.
What fields are exploited in CVE-2012-2577?
CVE-2012-2577 exploits the syslocation, syscontact, and sysName fields within the snmpd.conf file.