CVE-2022-47504

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Score

CVSS 3.1 7.2 High

Status

Modified - psirt@solarwinds.com

Published

2023-02-15

Last modified

2025-03-18

Weaknesses

CWE-502

Affected products

• Orion Platform (Solarwinds)
• Solarwinds Platform (Solarwinds)

References

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_r…
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47504