Skip to content
OpenAdvisories
High · 7.2 CVE-2023-33224 EUVD-2023-37394GHSA-xq6x-xxj4-mwgq

SolarWinds Platform Incorrect Behavior Order Vulnerability

Published Jul 26, 2023 · Updated Oct 23, 2024 · Assigned by SolarWinds

Description

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Affected products

VendorProductAffectedFixed
SolarWinds SolarWinds Platform < 2023.3 2023.3

Advisories 1

References