Medium severity5.5NVD Advisory· Published May 4, 2020· Updated Jun 17, 2026
CVE-2019-12864
CVE-2019-12864
Description
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:solarwinds:netpath:1.1.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:solarwinds:netpath:1.1.4:*:*:*:*:*:*:*
- (no CPE)range: 1.1.4
- cpe:2.3:a:solarwinds:network_performance_monitor:12.4:*:*:*:*:*:*:*
cpe:2.3:a:solarwinds:orion_platform:2018.4:hotfix3:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:solarwinds:orion_platform:2018.4:hotfix3:*:*:*:*:*:*
- (no CPE)range: 2018.4 HF3
- SolarWinds/Orion Platformdescription
- Range: 12.4
Patches
Vulnerability mechanics
References
2- www.esecforte.com/network-performance-monitor-india-esec-forte-technologies/nvdExploitThird Party Advisory
- www.solarwinds.com/network-performance-monitornvdVendor Advisory
News mentions
0No linked articles in our index yet.