CVE-2025-40545
Medium
Description
SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.
SeverityMedium
CVSS4.8
Exploit probability18. percentile0.3%
Product
Solarwinds Observability Self-hosted
PublishedNov 18, 2025
First seenNov 18, 2025
Weakness typeCWE-601Open redirect
How to fix
Update
- solarwinds observability_self-hosted2025.4.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solarwinds observability_self-hosted | v < 2025.4.1 | 2025.4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.