CVE-2019-12863

CVE-2019-12863

EPSS 1.1%

SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.esecforte.com/responsible-vulnerability-disclosure-cve-2019-12863-stored-html-injection-vulnerability-in-solarwinds-orion-platform-2018-4-hf3-npm-12-4-netpath-1-1-4/https://www.solarwinds.com/network-performance-monitor