CVE-2017-9537 Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vu...
MediumCVSS 4.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds network performance monitor | = 12.0.15300.90 | No fix listed |
References
- 20170929 [CVE-2017-9537] Persistent Cross-Site Scripting Vulnerabilities mailing-list
- 101071 third-party-advisory vdb-entry