← All advisories

Medium severity5.4NVD Advisory· Published Jun 24, 2020· Updated Jun 17, 2026

CVE-2020-14007

CVE-2020-14007

Description

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Solarwinds/Oriondescription
SolarWinds/Orion NPMllm-fuzzy
Range: 2019.4
SolarWinds/Orion Network Performance Monitor
cpe:2.3:a:solarwinds:orion_network_performance_monitor:2019.4:hotfix2:*:*:*:*:*:*
SolarWinds/Orion Web Performance Monitor
cpe:2.3:a:solarwinds:orion_web_performance_monitor:2019.4.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

gist.github.com/alert3/f8d33412ab0c671d3cac6a50b132a894nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.