VULNERABILITY INTELLIGENCE

CVE-2012-2602

CVSS score6.8 MEDIUM

EPSS probability5.98%

CISA KEVNot currently listed

Published2012-08-12

Last modified2026-06-16

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/Or... .