CVE-2020-13169: XSS
Published Sep 17, 2020
·Updated
Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).
Affected Software
1 affected component
SolarWinds Orion Platform<2020.2.1
Event History
Sep 17, 2020
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-13169.
2
What is the severity rating of CVE-2020-13169?
CVE-2020-13169 has a severity rating of critical.
3
Which software is affected by CVE-2020-13169?
The SolarWinds Orion Platform before 2020.2.1 is affected by CVE-2020-13169.
4
What is the impact of CVE-2020-13169?
CVE-2020-13169 may lead to information disclosure and the escalation of privileges, including the takeover of administrator accounts.
5
Where can I find more information about CVE-2020-13169?
More information about CVE-2020-13169 can be found in the SolarWinds Orion Platform release notes and in the SolarWinds support center.