← All advisories

Medium severity4.8NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026

CVE-2020-35856

CVE-2020-35856

Description

SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

SolarWinds/Orion Platform2 versions
cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*range: <2020.2.5
- (no CPE)range: <2020.2.5
SolarWinds/Orion Platformdescription

Patches

Vulnerability mechanics

References

2

documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-5_release_notes.htmnvdRelease NotesVendor Advisory
support.solarwinds.com/SuccessCenter/s/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.