CVE-2020-13169: XSS
First published: Thu Sep 17 2020(Updated: )
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SolarWinds Orion Platform | <2020.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-13169.
What is the severity rating of CVE-2020-13169?
CVE-2020-13169 has a severity rating of critical.
Which software is affected by CVE-2020-13169?
The SolarWinds Orion Platform before 2020.2.1 is affected by CVE-2020-13169.
What is the impact of CVE-2020-13169?
CVE-2020-13169 may lead to information disclosure and the escalation of privileges, including the takeover of administrator accounts.
Where can I find more information about CVE-2020-13169?
More information about CVE-2020-13169 can be found in the SolarWinds Orion Platform release notes and in the SolarWinds support center.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/solarwinds
- canonical/solarwinds orion platform