CVE-2012-2577
Summary
| CVE | CVE-2012-2577 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-08-12 16:55:00 UTC |
| Updated | 2017-08-29 01:31:00 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SolarWinds Orion Network Performance Monitor (NPM) Multiple Security Vulnerabilities | BID | www.securityfocus.com | Exploit |
| SolarWinds Network Performance Monitor Release Notes | CONFIRM | www.solarwinds.com | Vendor Advisory |
| Vulnerability Note VU#174119 - Solarwinds Network Performance Monitor 10.2.2 contains multiple vulnerabilities | CERT-VN | www.kb.cert.org | US Government Resource |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| About Secunia Research | Flexera | SECUNIA | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.