SolarWinds Orion Platform
Moderate fix1 remedy
cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*
Moderate fix1 remedy
- 2019.2 HF1
SolarWinds Orion Platform Stored Client-Side Template Injection Vulnerability Allowing Privilege Escalation
Vulnerability
Patched
A stored client-side template injection vulnerability has been identified in the SolarWinds Orion Platform version 2019.2 HF1. This vulnerability allows an attacker to inject an Angular expression, escaping the Angular sandbox to achieve stored cross-site scripting. The consequence of this vulnerability could lead to privilege escalation.
Impact
Exploitation of this vulnerability could result in stored cross-site scripting, allowing injected scripts to be executed in the context of the user.
Added: May 15, 2026, 9:26 AM
Updated: May 15, 2026, 9:26 AM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
5.4exploitability
3.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.