Skip to content
OpenAdvisories
High · 7.2 CVE-2022-36962 EUVD-2022-39619GHSA-pgg5-x7xr-3fmj

SolarWinds Platform Command Injection

Published Nov 29, 2022 · Updated Apr 25, 2025 · Assigned by SolarWinds

Description

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Platform 2022.3 and prior versions – ≤ 2022.3 —
SolarWinds Orion Platform 2020.2.6 HF5 and prior versions – ≤ 2020.2.6 HF5 —

References