Product:
Observability Self-Hosted
Summary
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability. When exploited, this vulnerability can lead to unintended script execution, potentially compromising the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2026-28297 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and can execute a crafted script that is stored within the application. This can be done by injecting malicious scripts into the application, which will then be executed in the context of other users accessing the affected application.
Affected Products
- SolarWinds Observability Self-Hosted: Affected by a stored cross-site scripting vulnerability that allows for unintended script execution.
Mitigation
It is recommended that users of SolarWinds Observability Self-Hosted apply the latest security updates and patches provided by SolarWinds. Additionally, implementing strict input validation and sanitization can help mitigate the risk of such vulnerabilities.