Observability Self-hosted vulnerabilities
5 known vulnerabilities in Observability Self-hosted from SolarWinds. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Observability Self-Hosted: Deserialization of Untrusted Data
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.
- 9.8 Critical severity
Observability Self-Hosted: Insufficient Verification of Data Authenticity
SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to the insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.
- 8.1 High severity
SolarWinds Observability Self-Hosted: Improper Neutralization of Input During Web Page Generation
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
- 8.7 High severity
SolarWinds Observability Self-Hosted: Improper Neutralization of Input During Web Page Generation
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
- 7.8 High severity
SolarWinds Observability Self-Hosted: Deserialization of Untrusted Data
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vuln