CVE-2022-36963highCWE-94

CVE-2022-36963: high-severity vulnerability in SolarWinds Platform

SolarWinds Platform Deserialization of Untrusted Data Vulnerability

Published 21 Apr 2023 · Updated 05 Feb 2025

Follow this CVE + Monitor SolarWinds Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 8.2%

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

SolarWinds Platform Command Injection Vulnerability · SolarWinds Platform

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36963