SolarWinds Platform Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in SolarWinds Platform. This issue arises from inadequate sanitization of input parameters, allowing for the injection of malicious scripts. The vulnerability requires authentication by a high-privileged account to be exploited.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade to SolarWinds Platform version 2025.1.1, available in the Customer Portal. For more information on the upgrade process, consult the SolarWinds Platform Product Installation and Upgrade Guide.