Medium severity6.1NVD Advisory· Published Jan 17, 2020· Updated Jun 17, 2026
CVE-2019-17127
CVE-2019-17127
Description
A Stored Client Side Template Injection (CSTI) with Angular was discovered in the SolarWinds Orion Platform 2019.2 HF1 in many application forms. An attacker can inject an Angular expression and escape the Angular sandbox to achieve stored XSS. This can lead to privilege escalation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32019.2 HF1+ 1 more
- (no CPE)range: 2019.2 HF1
- cpe:2.3:a:solarwinds:orion_platform:2019.2:hotfix1:*:*:*:*:*:*
- SolarWinds/Orion Platformdescription
Patches
Vulnerability mechanics
References
2- support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2019-4-Hotfix-3nvdVendor Advisory
- support.solarwinds.com/SuccessCenter/s/orion-platformnvdProductVendor Advisory
News mentions
0No linked articles in our index yet.