Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:observability_self-hosted:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductObservability Self Hosted (8250dd17-0bed-5cf1-8b27-036769cf398a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28301 vulnerable 2026-07-29 00:37:43.094016 SolarWinds Observability Self-Hosted Open Redirect Vulnerability
MEDIUM (4.8)
A vulnerability in which an attacker can provide a crafted external URL that may redirect a user to an unintended website.
Published: 2026-06-09T15:41:46.314Z
Updated: 2026-06-09T18:40:29.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28298 vulnerable 2026-06-08 07:55:15.158908 SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
MEDIUM (5.9)
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
Published: 2026-03-26T14:08:49.449Z
Updated: 2026-03-27T03:55:35.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28297 vulnerable 2026-06-08 07:55:15.158281 SolarWinds Observability Self-Hosted Stored Cross-Site Scripting Vulnerability
MEDIUM (6.1)
SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.
Published: 2026-03-26T14:01:37.526Z
Updated: 2026-03-27T03:55:35.217Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40545 vulnerable 2026-06-08 07:25:04.961292 SolarWinds Observability Self-Hosted Open Redirection Vulnerability
MEDIUM (4.8)
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
Published: 2025-11-18T08:55:52.919Z
Updated: 2025-11-18T21:42:35.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26397 vulnerable 2026-06-08 07:12:51.591011 SolarWinds Observability Self-Hosted Deserialization of Untrusted Data Local Privilege Escalation Vulnerability
HIGH (7.8)
SolarWinds Observability Self-Hosted is susceptible to Deserialization of Untrusted Data Local Privilege Escalation vulnerability. An attacker with low privileges can escalate privileges to run malicious files copied to a permission-protected folder. This vulnerability requires authentication from a low-level account and local access to the host server.
Published: 2025-07-24T07:57:53.475Z
Updated: 2025-07-24T13:16:37.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26395 vulnerable 2026-06-08 07:12:51.589002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26394 vulnerable 2026-06-08 07:12:51.588479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26392 vulnerable 2026-06-08 07:12:51.586957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26391 vulnerable 2026-06-08 07:12:51.586598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.