CVE-2025-40545

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

• CWE-601

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2025-4-1_release_notes.htmRelease Notes, Vendor Advisory
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40545Vendor Advisory

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-40537SolarWinds Web Help Desk was found to be susceptible to a ha…7.5
• CVE-2025-40538A broken access control vulnerability exists in Serv-U which…7.2
• CVE-2025-40539A type confusion vulnerability exists in Serv-U which when e…7.2
• CVE-2025-4054The Relevanssi – A Better Search plugin for WordPress is vul…6.1
• CVE-2025-40540A type confusion vulnerability exists in Serv-U which when e…7.2
• CVE-2025-40541An Insecure Direct Object Reference (IDOR) vulnerability exi…7.2
• CVE-2025-40547A logic error vulnerability exists in Serv-U which when abus…9.1
• CVE-2025-40548A missing validation process exists in Serv U when abused, c…9.1
• CVE-2025-40549A Path Restriction Bypass vulnerability exists in Serv-U tha…9.1
• CVE-2025-4055The Multiple Post Type Order plugin for WordPress is vulnera…6.4
• CVE-2025-40551SolarWinds Web Help Desk was found to be susceptible to an u…9.8
• CVE-2025-40552SolarWinds Web Help Desk was found to be susceptible to an a…9.8