CVE-2012-4939 Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arb...
MediumCVSS 4.3
EPSS 7.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds ip address manager web interface | <= 3.0 | No fix listed |
| solarwinds orion network performance monitor | All versions | No fix listed |
| solarwinds orion network performance monitor | = 10.0 | No fix listed |
| solarwinds orion network performance monitor | = 10.1 | No fix listed |
| solarwinds orion network performance monitor | = 10.1.13.0 | No fix listed |
| solarwinds orion network performance monitor | = 10.2 | No fix listed |
| solarwinds orion network performance monitor | = 10.2.1 | No fix listed |
| solarwinds orion network performance monitor | = 10.2.2 | No fix listed |
| solarwinds orion network performance monitor | = 10.3 | No fix listed |
| solarwinds orion network performance monitor | = 10.3.1 | No fix listed |
References
- VU#203844 exploit third-party-advisory us-government-resource