CVE-2024-45717

HIGH
MEDIUM Priority: 0.03 BB Relevance: 39/100
Published: 2024-12-04 Modified: 2026-11-04 First seen: 2026-11-03 Status: active

Attack Surface

Adjacent Low Complexity Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: Low
UI: Required
S: Unchanged
C: High
I: High
A: Low

Description

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulnerability requires authentication and requires user interaction.

Affected Software (3)

VendorProductVersion
SolarWinds SolarWinds Platform SolarWinds Platform 2024.4 and prior versions
SolarWinds SolarWinds Platform SolarWinds Platform 2024.4 and prior versions
solarwinds solarwinds_platform < 2024.4.1

Bug Bounty Relevance

39 / 100
✓ Low complexity

CVSS Score

7.0 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

EPSS — Exploitation Probability

0.39%
Raw Score 0.003860
Percentile 33.2%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00386
2026-11-12
0.00386
2026-11-10
0.00375
2026-11-09
0.00375
2026-11-08
0.00375
2026-11-07
0.00375
2026-11-06
0.00375
2026-11-05
0.00375
2026-11-04
0.00375
2026-11-03
0.00375

Intelligence Sources

mitre ref →
nvd ref →