CVE-2025-26393

Medium

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges,…

SolarWinds·CWE-653·Published 2025-03-17

CVSS

5.4

EPSS

0.00

KEV

Exploits

cve.orgen

181 chars

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges, leading to unauthorized data manipulation.

NVDen

181 chars

SolarWinds Service Desk is affected by a broken access control vulnerability. The issue allows authenticated users to escalate privileges, leading to unauthorized data manipulation.

SolarWinds Service Desk se ve afectado por una vulnerabilidad de control de acceso. El problema permite a los usuarios autenticados escalar privilegios, lo que provoca la manipulación no autorizada de datos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.4	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
3.1	Secondary	NVD	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N