CVE-2024-29003: SolarWinds Platform Cross Site Scripting Vulnerability
Published Apr 18, 2024
·Updated
The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction.
Affected Software
2 affected components
SolarWinds Platform
SolarWinds SolarWinds Platform<2024.1.1
Remediation
Information
SolarWinds recommends that customers upgrade to SolarWinds Platform 2024.1.1 as soon as it becomes available.
Event History
Apr 18, 2024
CVE Published
via MITRE·09:07 AM
Data Sourced
via MITRE·09:07 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29003?
CVE-2024-29003 is classified as a moderate severity Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-29003?
To mitigate CVE-2024-29003, update your SolarWinds Platform to version 2024.1.1 or later.
3
Is user authentication required for CVE-2024-29003?
Yes, CVE-2024-29003 requires user authentication and interaction to exploit.
4
Which versions of SolarWinds Platform are affected by CVE-2024-29003?
CVE-2024-29003 affects all versions of SolarWinds Platform prior to 2024.1.1.
5
What impact does CVE-2024-29003 have on users?
CVE-2024-29003 could allow an authenticated attacker to execute malicious scripts in the context of the user's session.