CVE-2012-2577

no score yetEPSS 10%

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.

EPSS: 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-08-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:orion_network_performance_monitor

References

http://secunia.com/advisories/50004
http://www.kb.cert.org/vuls/id/174119
http://www.securityfocus.com/bid/54624
http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/77147

Check your stack JSON