Known vulnerabilities in Hybrid Cloud Observability

Vendor: SolarWinds
Software: Hybrid Cloud Observability
Software CPE: cpe:2.3:a:solarwinds:hybrid_cloud_observability:*:*:*:*:*:*:*:*
Website: https://www.solarwinds.com/
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Hybrid Cloud Observability Hybrid Cloud Observability is affected by 14 known vulnerabilities: 7 medium, 7 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139618 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-28301		 CWE-601 Low
No
No
 2026.2 27.07.2026 SB20260727221
#VU124640 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28298		 CWE-79 Low
No
No
 2026.1.1 26.03.2026 SB2026032639
#VU124639 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-28297		 CWE-79 Low
No
No
 2026.1.1 26.03.2026 SB2026032639
#VU122157 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-26392		 CWE-89 Medium
No
No
 2025.4 30.01.2026 SB2026013036
#VU118571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26391		 CWE-79 Low
No
No
 2025.4.1 18.11.2025 SB2025111817
SB2025111818
#VU118570 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-40545		 CWE-601 Low
No
No
 2025.4.1 18.11.2025 SB2025111817
SB2025111818
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 2025.4.1 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU103290 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-12801		 CWE-611 Medium
No
No
 2025.4.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 23 more
#VU103289 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-12798		 CWE-94 Low
No
No
 2025.4.1 24.01.2025 SB2025012460
SB2025012488
SB2025012495
and 28 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 2025.4.1 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98517 - Resource exhaustion
CVE-2024-8184		 CWE-400 Medium
No
No
 2025.4.1 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 2025.4.1 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU72480 - Exposure of sensitive information to an unauthorized actor
CVE-2022-47508		 CWE-200 Medium
No
No
 2023.1 22.02.2023 SB2023022202
#VU67771 - Exposure of sensitive information to an unauthorized actor
CVE-2021-35226		 CWE-200 Low
No
No
 2022.3 30.09.2022 SB2022093012