SolarWinds Platform XSS Vulnerabilities Identified

This advisory from CERT-Bund details multiple vulnerabilities within the SolarWinds Platform (formerly Orion) that attackers can exploit to conduct Cross-Site Scripting (XSS) attacks. The vulnerabilities affect SolarWinds Platform versions prior to 2026.1.1 and have been assigned a CVSS Base Score of 6.5 (medium). The advisory indicates that remote attacks are possible and provides mitigation information.

Organizations utilizing the SolarWinds Platform, particularly those running versions prior to 2026.1.1, should review the advisory and implement available mitigation strategies to protect their systems. This includes assessing the potential impact of these XSS vulnerabilities on their IT infrastructure and user data. While no specific compliance deadline is mentioned, prompt action is recommended to address the security risks.