CVE-2026-28297

Sažetak

SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.

Reference

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-1-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28297

CVSS

Base:	6.1
Impact:	5.2
Exploitability:	0.9

Pristup

Vektor	Složenost	Autentikacija
ADJACENT_NETWORK	LOW	HIGH

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	HIGH	NONE

CVSS vektor

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Zadnje važnije ažuriranje

26-03-2026 - 15:16

Objavljeno

26-03-2026 - 15:16