CVE-2019-12954

Publication date

2020-02-17 16:42:27

Family

mitre

State

PUBLISHED

Description

SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.