CVE-2024-52612

SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. This vulnerability requires authentication by a high- privileged account to be exploitable.

• CWE-79

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htmRelease Notes
• https://www.solarwinds.com/trust-center/security-advisories/cve-2024-52612Vendor Advisory

Published

Feb 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-52600Statmatic is a Laravel and Git powered content management sy…5.3
• CVE-2024-52601iTop is an web based IT Service Management tool. Prior to ve…6.5
• CVE-2024-52602Matrix Media Repo (MMR) is a highly configurable multi-homes…5.3
• CVE-2024-52606SolarWinds Platform is affected by server-side request forge…9.8
• CVE-2024-5261Improper Certificate Validation vulnerability in LibreOffice…9.8
• CVE-2024-52611The SolarWinds Platform is vulnerable to an information disc…3.5
• CVE-2024-52613A heap-based buffer under-read in tsMuxer version nightly-20…5.5
• CVE-2024-52614Use of hard-coded cryptographic key issue exists in "Kura Su…4
• CVE-2024-52615A flaw was found in Avahi-daemon, which relies on fixed sour…5.3
• CVE-2024-52616A flaw was found in the Avahi-daemon, where it initializes D…5.3
• CVE-2024-5262Files or Directories Accessible to External Parties vulnerab…9.8
• CVE-2024-5263The ElementsKit Pro plugin for WordPress is vulnerable to St…5.4