Unscored severity · published Oct 31, 2012
CVE-2012-4939
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote…
–
CVSS
7.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance Monitor might allow remote attackers to inject arbitrary web script or HTML via the "Search for an IP address" field.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IA
IP Address Manager Web Interface · Solarwinds
through 3.0 · source: NVD
ON
Orion Network Performance Monitor · Solarwinds
10.0; 10.1; 10.1.13.0; 10.2; 10.2.1; 10.2.2; +2 more · source: NVD
Affected product
IA
IP Address Manager Web Interface
Solarwinds