Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-26394 1 Solarwinds 1 Observability Self-hosted 2025-11-12 4.8 Medium
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
CVE-2025-26395 1 Solarwinds 1 Observability Self-hosted 2025-11-12 7.1 High
SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.