CVE-2023-33224highCWE-696

CVE-2023-33224: high-severity vulnerability in SolarWinds Platform

SolarWinds Platform Incorrect Behavior Order Vulnerability

Published · Updated

Follow this CVE+ Monitor SolarWinds Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 2.8%
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
SolarWinds · SolarWinds Platform
Related CVEs — SolarWinds Platform

In the same product, most dangerous first.

CVE-2022-38111HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 84.8%CVE-2022-36958HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 81.9%CVE-2023-23836HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 80.3%CVE-2022-38108HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 66.6%CVE-2022-47504HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 41.9%CVE-2022-47503HIGHSolarWinds Platform Deserialization of Untrusted Data VulnerabilityEPSS 41.0%