← Vulnerability feed

Vulnerability record · CVE-2010-4828 · published 24 August 2011

CVE-2010-4828: Solarwinds orion network performance monitor cross-site scripting vulnerability

Solarwinds · Orion Network Performance Monitor

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.

4.3 CVSS 2.0 Medium EPSS 5.1% · top 8.0% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
5.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/42486 Vendor Advisory
http://securityreason.com/securityalert/8349
http://www.securityfocus.com/archive/1/515083/100/0/threaded
http://www.securityfocus.com/bid/45257 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/63956
http://secunia.com/advisories/42486 Vendor Advisory
http://securityreason.com/securityalert/8349
http://www.securityfocus.com/archive/1/515083/100/0/threaded
http://www.securityfocus.com/bid/45257 Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/63956

Track CVE-2010-4828 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-8917Solarwinds orion network performance monitor vulnerabilitySolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes…EPSS 36%8.8CVE-2020-14005Solarwinds orion network performance monitor vulnerabilitySolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a de…EPSS 14%7.5CVE-2014-9566SolarWinds Orion AccountManagement.asmx SQL injection via dir and sort parametersThe Manage Accounts page in the AccountManagement.asmx service of the SolarWinds Orion Platform 2015.1 contains multiple SQL injection flaws in the d…EPSS 48%analysed6.8CVE-2012-2602Solarwinds orion network performance monitor cross-site request forgery vulnerabilityMultiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers…EPSS 6.0%5.4CVE-2020-14006Solarwinds orion network performance monitor cross-site scripting vulnerabilitySolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team.EPSS 1.1%5.4CVE-2020-14007Solarwinds orion network performance monitor cross-site scripting vulnerabilitySolarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition.EPSS 1.1%4.3CVE-2012-4939Solarwinds ip address manager web interface cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in IPAMSummaryView.aspx in the IPAM web interface before 3.0-HotFix1 in SolarWinds Orion Network Performance…EPSS 7.2%4.3CVE-2012-2577Solarwinds orion network performance monitor cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inj…EPSS 10%

Source: NIST National Vulnerability Database (record CVE-2010-4828), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.