WID-SEC-W-2025-0303

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

SolarWinds Platform: Mehrere Schwachstellen

view advisory published 2025-02-10

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SolarWinds Platform ausnutzen, um Informationen offenzulegen oder ein Cross Site Scripting auszulösen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2024-52612USmedium4.8—
SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. This vulnerability requires…
CVE-2024-52611US——
The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could…
CVE-2024-52606UScritical9.8—
SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan