Medium severity6.1NVD Advisory· Published Jan 17, 2020· Updated Jun 17, 2026
CVE-2019-17125
CVE-2019-17125
Description
A Reflected Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32019.2 HF1+ 1 more
- (no CPE)range: 2019.2 HF1
- cpe:2.3:a:solarwinds:orion_platform:2019.2:hotfix1:*:*:*:*:*:*
- SolarWinds/Orion Platformdescription
Patches
Vulnerability mechanics
References
2- support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3nvdVendor Advisory
- support.solarwinds.com/SuccessCenter/s/orion-platformnvdProductVendor Advisory
News mentions
0No linked articles in our index yet.