CVE-2020-13169

—

CVSS 3.1

9.0 critical

EPSS

2%p82

Published

Sep 17, 2020 (Sep 17, 2020)

Modified

Jun 17, 2026

Description

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

Vendors: solarwinds
Products: orion platform
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.