CVE-2012-2577

Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) syslocation, (2) syscontact, or (3) sysName field of an snmpd.conf file.

• CWE-79

• http://secunia.com/advisories/50004Vendor Advisory
• http://www.kb.cert.org/vuls/id/174119US Government Resource
• http://www.securityfocus.com/bid/54624Exploit
• http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77147
• http://secunia.com/advisories/50004Vendor Advisory
• http://www.kb.cert.org/vuls/id/174119US Government Resource
• http://www.securityfocus.com/bid/54624Exploit
• http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htmVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77147

Published

Aug 12, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2571Multiple cross-site scripting (XSS) vulnerabilities in WinWe…
• CVE-2012-2572Cross-site scripting (XSS) vulnerability in the ThreeWP Emai…
• CVE-2012-2573Multiple cross-site scripting (XSS) vulnerabilities in T-dah…
• CVE-2012-2574SQL injection vulnerability in the management console in Sym…
• CVE-2012-2575Cross-site scripting (XSS) vulnerability in NetWin SurgeMail…
• CVE-2012-2576SQL injection vulnerability in the LoginServlet page in Sola…
• CVE-2012-2578Multiple cross-site scripting (XSS) vulnerabilities in Smart…
• CVE-2012-2579Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2012-2580Cross-site scripting (XSS) vulnerability in the Postie plugi…
• CVE-2012-2582Multiple cross-site scripting (XSS) vulnerabilities in Open …
• CVE-2012-2583Cross-site scripting (XSS) vulnerability in Mini Mail Dashbo…
• CVE-2012-2584Multiple cross-site scripting (XSS) vulnerabilities in Alt-N…