SolarWinds Observability Self-Hosted vulnerabilities

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability due to insufficient integrity checks. Installations configured in a non-default and non-secure configuration are affected.

SolarWinds Observability Self-Hosted was found to be affected by an unauthenticated remote code execution vulnerability stemming from deserialization of untrusted data when the application is configured to use a specific communication mode.

SolarWinds Observability Self-Hosted is susceptible to SQL injection that may display sensitive data using a low-level account. Requires authentication from a low-privilege account.