Skip to content
OpenAdvisories
High · 8.8 CVE-2022-36958 EUVD-2022-39615GHSA-3p56-mxjf-mfgp

SolarWinds Platform Deserialization of Untrusted Data

Published Oct 20, 2022 · Updated May 8, 2025 · Assigned by SolarWinds

Description

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Platform unspecified – ≤ 2022.3 and prior versions —
SolarWinds Orion Platform unspecified – ≤ 2020.2.6 HF5 and prior versions —

References