CVE-2022-36960

SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@solarwinds.com

Published

2022-11-29

Last modified

2025-04-24

Weaknesses

CWE-20, CWE-287

Affected products

• Orion Platform (Solarwinds)
• Solarwinds Platform (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-4_r…
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36960