Cloudanix VulnDB

CVE-2025-40545

Medium · 4.4

CVSS

4.4

EPSS

0.3%

Published

Nov 18, 2025

CISA due date

—

The record

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

Affected packages

Ecosystem Package Introduced Fixed