GCVE - cpe:2.3:a:solarwinds:solarwinds_observability

Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:solarwinds_observability_self-hosted:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Solarwinds (`c393915a-764f-5773-8a18-db4a4d0f1496`)
Product	Solarwinds Observability Self Hosted (`635f8ae3-1801-5a1e-a3ea-58835eeb4bed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-28330`	vulnerable	2026-11-03 10:15:19.022663	SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability MEDIUM (4.6) SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages. Published: 2026-10-20T16:23:19.940Z Updated: 2026-10-23T16:04:14.841Z Open on db.gcve.eu Reference links https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28330 https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28328`	vulnerable	2026-11-03 10:15:18.992917	SolarWinds Observability Self-Hosted broken authorization schema HIGH (8.8) SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their assigned permissions. Published: 2026-10-20T16:17:18.712Z Updated: 2026-10-23T15:58:55.705Z Open on db.gcve.eu Reference links https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28328 https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28329`	vulnerable	2026-11-03 10:15:18.155184	SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF) MEDIUM (6.4) SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application server to send requests to attacker-controlled or internal destinations. Published: 2026-10-20T16:22:48.111Z Updated: 2026-10-23T16:00:53.960Z Open on db.gcve.eu Reference links https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-4_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28329 https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28298`	vulnerable	2026-06-08 07:55:15.158763	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability MEDIUM (5.9) SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. Published: 2026-03-26T14:08:49.449Z Updated: 2026-03-27T03:55:35.745Z Open on db.gcve.eu Reference links https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28298 https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-1-1_release_notes.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28297`	vulnerable	2026-06-08 07:55:15.156737	SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability MEDIUM (6.1) SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution. Published: 2026-03-26T14:01:37.526Z Updated: 2026-03-27T03:55:35.217Z Open on db.gcve.eu Reference links https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28297 https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-1-1_release_notes.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-40545`	vulnerable	2026-06-08 07:25:04.959210	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26397`	vulnerable	2026-06-08 07:12:51.590973	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26395`	vulnerable	2026-06-08 07:12:51.588964	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26394`	vulnerable	2026-06-08 07:12:51.588439	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26391`	vulnerable	2026-06-08 07:12:51.585314	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Solarwinds Observability Self Hosted

Notes

PURL mappings

Vulnerability references

Contribute