Solarwinds Observability Self-hosted vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Solarwinds Observability Self-hosted: 8 record(s), with affected versions and fixes.cpe:2.3:a:solarwinds:observability_self-hosted
CVE-2026-28325
High · 8.8
CWE-502 Sep 22, 2026
SolarWinds Observability Self-Hosted Unauthenticated Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
CVE-2026-28324
Critical · 9.8
CWE-345 Sep 22, 2026
SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
CVE-2026-28301
Medium · 4.8
CWE-601 Jun 9, 2026
SolarWinds Observability Self-Hosted Open Redirect Vulnerability
A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.
CVE-2026-28298
High · 8.1
CWE-79 Mar 26, 2026
SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
CVE-2026-28297
High · 8.7
CWE-79 Mar 26, 2026
SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
CVE-2025-40545
Medium · 4.4
CWE-601 Nov 18, 2025
SolarWinds Observability Self-Hosted Open Redirection Vulnerability
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
CVE-2025-26391
Medium · 5.4
CWE-79 Nov 18, 2025
SolarWinds Observability Self-Hosted XSS Vulnerability
SolarWinds Observability Self-Hosted XSS Vulnerability. The SolarWinds Platform was susceptible to a XSS vulnerability that affects user-created URL fields. This vulnerability requires authentication from a low-level account.
CVE-2025-26392
Medium · 4.6
CWE-89 Oct 21, 2025
SolarWinds Observability Self-Hosted SQL Injection Vulnerability
SolarWinds Observability Self-Hosted is susceptible to SQL injection vulnerability that may display sensitive data using a low-level account. This vulnerability requires authentication from a low-privilege account.