CVE-2012-2577

Published: Aug 12, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.

Affected (9)

Products: Solarwinds: Orion Network Performance Monitor

Solarwinds

1 product

Orion Network Performance Monitor

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Solarwinds Orion Network Performance Monitor	Up to 10.2
Solarwinds Orion Network Performance Monitor	Version 10.0
Solarwinds Orion Network Performance Monitor	Version 10.1
Solarwinds Orion Network Performance Monitor	Version 7.8.5
Solarwinds Orion Network Performance Monitor	Version 8.5.1
Solarwinds Orion Network Performance Monitor	Version 8.5
Solarwinds Orion Network Performance Monitor	Version 9.0
Solarwinds Orion Network Performance Monitor	Version 9.1
Solarwinds Orion Network Performance Monitor	Version 9.5.1