CVE-2022-36965

Stored and DOM XSS in QoE Applications: Orion Platform

Medium · published September 30, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00762 · 54.9th percentile
Published
2022-09-30T16:45Z
EPSS history
Timeline
  • 30 SEP 16:45Z
    Stored and DOM XSS in QoE Applications: Orion Platform
    cvelistv5