CVE-2025-40545

CVE-2025-40545CVE-2025-40545

solarwinds / observability_self-hosted

Description

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

Scoring

CVSS 4.8 ()
VectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Last modified2026-10-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.