CVE-2012-2602 Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for...

MediumCVSS 6.8 EPSS 6.0% Public exploit

Published: 2012-08-12 19:00
Updated: 2026-06-17 02:41
Exploit status: Public exploit available

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or (2) modify account privileges via a ynAdminRights action to Admin/Accounts/EditAccount.aspx.

Affected products

Product	Affected versions	Fixed in
solarwinds orion network performance monitor	<= 10.2.2	No fix listed
solarwinds orion network performance monitor	= 10.1.13.0	No fix listed

References

84116 vdb-entry
50004 third-party-advisory vendor-advisory
20011 exploit
VU#174119 third-party-advisory us-government-resource
54624 exploit vdb-entry
www.solarwinds.com

CVSS v2.0

6.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 5.98% (percentile 93.4)
CWE: CWE-352

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities Exploit · Exploit Database (OffSec) · 2012-07-21