Skip to content
OpenAdvisories
High · 8.8 CVE-2022-36961 EUVD-2022-39618GHSA-g8wp-3x9j-448g

Orion Platform SQL Injection Privilege Escalation Vulnerability

Published Sep 30, 2022 · Updated May 20, 2025 · Assigned by SolarWinds

Description

A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Orion Platform 2022.2.3 and previous versions – < 2022.2.3 2022.2.3

References