Product:
Observability Self-Hosted
Summary
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability. When exploited, this vulnerability can lead to unintended script execution, potentially compromising the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2026-28298 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and require user interaction. By injecting malicious scripts into the application, the attacker can execute these scripts in the context of the affected user, leading to unauthorized actions and data exposure.
Affected Products
- SolarWinds Observability Self-Hosted: Affected by a stored cross-site scripting vulnerability that allows for unintended script execution.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by SolarWinds. Additionally, users should ensure that proper input validation and sanitization measures are in place to prevent script injection.