{"id":"CVE-2012-2577","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-2577","generatedAt":"2026-11-05T08:12:37.796Z","title":"Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an…","description":"Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.","published":"2012-08-12T16:55:01.000Z","lastModified":"2026-06-16T23:41:43.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N"},"cwe":["CWE-79"],"affected":["solarwinds/orion network performance monitor"],"epss":{"score":0.1021,"percentile":0.95687,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2012-07-21","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":20011,"kind":"exploit","title":"SolarWinds Orion Network Performance Monitor 10.2.2 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/20011","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/webapps/20011.js","file":"exploits/windows/webapps/20011.js","published":"2012-07-21","added":"2012-07-21","updated":"2017-05-25","author":"muts","type":"webapps","platform":"windows","port":null,"verified":true,"codes":["CVE-2012-2602","OSVDB-84117","OSVDB-84116","CVE-2012-2577"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt20500/screen-shot-2012-07-21-at-50011-pm.png","referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 10.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://secunia.com/advisories/50004","tags":["Vendor Advisory"],"source":"cret@cert.org"},{"url":"http://www.kb.cert.org/vuls/id/174119","tags":["US Government Resource"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/54624","tags":["Exploit"],"source":"cret@cert.org"},{"url":"http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm","tags":["Vendor Advisory"],"source":"cret@cert.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77147","source":"cret@cert.org"},{"url":"http://secunia.com/advisories/50004","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/174119","tags":["US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/54624","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77147","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-2577","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}