{"affected":[{"defaultStatus":"affected","product":"SolarWinds Platform","source":"CNA: SolarWinds","vendor":"SolarWinds","versions":[{"status":"affected","version":"SolarWinds Platform 2024.4 and prior versions"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*","versionEndExcluding":"2024.4.1","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2024-45717","cwes":["CWE-79"],"description":"The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction.","epss":{"date":"2026-11-03","percentile":0.31564,"score":0.00375},"exploits":[],"kev":null,"metrics":[{"score":7,"severity":"high","source":"CNA: SolarWinds","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","version":"3.1"},{"score":4.8,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},{"score":7,"severity":"high","source":"NVD: psirt@solarwinds.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","version":"3.1"}],"modifiedAt":1793744244207,"publishedAt":1733295957712,"references":[{"source":"CNA: SolarWinds","tags":[],"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45717"},{"source":"CNA: SolarWinds","tags":[],"url":"https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-4-1_release_notes.htm"},{"source":"psirt@solarwinds.com","tags":["Release Notes"],"url":"https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-4-1_release_notes.htm"},{"source":"psirt@solarwinds.com","tags":["Vendor Advisory"],"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45717"}],"remediation":[{"kind":"fix","source":"CNA: SolarWinds","text":"SolarWinds recommends that customers upgrade to SolarWinds Platform 2024.4.1 as soon as it becomes available."}],"revision":"c0c33171b2af27f7b1e26f390a6a1a3548abebb6a0d29ee620298e855d2d38ce","sources":[{"modifiedAt":1793742759410,"name":"CNA: SolarWinds","retrievedAt":1793743997416,"url":"https://www.cve.org/CVERecord?id=CVE-2024-45717"},{"modifiedAt":1793744244207,"name":"NVD","retrievedAt":1793751367351,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45717"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793744105434,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-45717"}],"ssvc":{"assessedAt":1733460922054,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"SolarWinds Platform Cross- Site Scripting Vulnerability","updatedAt":1793751367351}