VULNERABILITY INTELLIGENCE

CVE-2020-13169

CVSS score9 CRITICAL
EPSS probability2.21%
CISA KEVNot currently listed
Published2020-09-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

Stored XSS (Cross-Site Scripting) exists in the SolarWinds Orion Platform before before 2020.2.1 on multiple forms and pages. This vulnerability may lead to the Information Disclosure and Escalation of Privileges (takeover of administrator account).

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references