Skip to content
OpenAdvisories
High · 8.8 CVE-2022-36960 EUVD-2022-39617GHSA-m5r3-w5hq-w9c2

SolarWinds Platform Improper Input Validation

Published Nov 29, 2022 · Updated Apr 24, 2025 · Assigned by SolarWinds

Description

SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Platform 2022.3 and prior versions – < 2022.3 2022.3
SolarWinds Orion Platform 2020.2.6 HF5 and prior versions – ≤ 2020.2.6 HF5 —

References