Lucene search
HistoryApr 18, 2024 - 9:15 a.m.
CVE-2024-28076
solarwinds
open redirection
vulnerability
url parameter
domain
CVSS3
7
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
32.1%
The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domain when using URL parameter with relative entry in the correct format
Related
vulnrichment
vulnrichment
CVE-2024-28076 SolarWinds Platform Arbitrary Open Redirection Vulnerability
2024-04-18 09:05:42
cvelist
cvelist
CVE-2024-28076 SolarWinds Platform Arbitrary Open Redirection Vulnerability
2024-04-18 09:05:42
cve
cve
CVE-2024-28076
2024-04-18 09:15:11
nessus
nessus
SolarWinds Platform 2024.0 < 2024.1.1 Multiple Vulnerabilities XSS
2024-04-19 00:00:00
CVSS3
7
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:L
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
32.1%
Related for NVD:CVE-2024-28076