Security Advisory

CVE-2019-12954

5.4
MEDIUM

Vulnerability Description

SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.
Published Date February 17, 2020
Official Source NIST NVD Advisory