VulnerabilityAnalyzed

CVE-2024-52611

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message.

LOW 3.5EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.

CVSS 3.1: 3.5 LOWCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.35% probability · 29th percentile
CISA KEV: Not listed
Weakness: CWE-209
Affected: solarwinds/solarwinds platform
Source: psirt@solarwinds.com

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htmRelease Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52611Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.