CVE-2012-2602: Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor...

Security readout for executives and security teams

SolarWinds Orion Network Performance Monitor before 10.3.1 could let an attacker trick a logged-in administrator into creating accounts or changing account privileges. The attack depends on abusing the administrator’s browser session, so the main business risk is unauthorized administrative access to network monitoring infrastructure. Exposure is limited to organizations running SolarWinds Orion Network Performance Monitor versions before 10.3.1, especially where administrators use the web console. The source bundle does not identify affected CPEs, deployment patterns, or internet exposure prevalence. Treat this as high priority if any legacy Orion NPM instance remains. Compromise of monitoring administration can weaken visibility and trust in operational systems. If all instances are 10.3.1 or later, priority shifts to evidence collection and closure. Mitigation focus: Upgrade SolarWinds Orion NPM to version 10.3.1 or later.; Review SolarWinds release notes for vendor remediation details.; Remove or isolate unsupported pre-10.3.1 Orion NPM instances..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.