MEDIUMCVSS v3.1 4.6Vulnerability

CVE-2026-28330

SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authenticated users who access the affected pages.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Cvss severity
MEDIUM
Cvss score
4.6
Retrieved at
2026-10-20T21:15:35+00:00
Score
4.6
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-28330
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
First seen by Signal
2026-10-20T21:15:35+00:00
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Published at
2026-10-20T17:17:39.213
Last modified
2026-10-20T19:59:00.607

Related Entities (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-28330 (CVSS v3.1 4.6) — Ninja Signal Threat Intelligence | Ninja Signal