CVE-2021-35239: Stored XSS in Maps text box hyperlink Vulnerability
Published Aug 31, 2021
·Updated
A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.
Affected Software
2 affected components
SolarWinds Orion Platform<=2020.2.5
SolarWinds Orion Platform=2020.2.6
Remediation
Information
SolarWinds recommends installing 2020.2.6 Hotfix 1 for the Orion Platform as soon as it becomes available. All customers should implement all the recommendations from the Orion Secure Configuration Guide.
Event History
Aug 31, 2021
CVE Published
via MITRE·03:56 PM
Data Sourced
via MITRE·03:56 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-35239?
CVE-2021-35239 is a vulnerability that allows a user with Orion map manage rights to store cross-site scripting (XSS) via a text box hyperlink.
2
How severe is CVE-2021-35239?
CVE-2021-35239 has a severity rating of 5.4 (High).
3
What software is affected by CVE-2021-35239?
The SolarWinds Orion Platform versions up to 2020.2.5 and 2020.2.6 are affected by CVE-2021-35239.
4
How can I mitigate the CVE-2021-35239 vulnerability?
To mitigate the CVE-2021-35239 vulnerability, apply the hotfix provided by SolarWinds. More information can be found in the references section.
5
Where can I find more information about CVE-2021-35239?
You can find more information about CVE-2021-35239 in the references section.