Solarwinds Platform vulnerabilities

CVE-2024-29000 [MEDIUM] CWE-79 CVE-2024-29000: The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerabil The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

CVE-2024-29004 [MEDIUM] CWE-79 CVE-2024-29004: The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

CVE-2023-33229 [LOW] CWE-94 CVE-2023-33229: The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vu The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.

CVE-2024-52611 [LOW] CWE-209 CVE-2024-52611: The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error me The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.