Vulnerability Details CVE-2022-36961
A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.752
EPSS Ranking 99.4%
CVSS Severity
CVSS v3 Score 8.8
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36961
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36961
Products affected by CVE-2022-36961
-
cpe:2.3:a:solarwinds:orion_platform:2016.1
-
cpe:2.3:a:solarwinds:orion_platform:2016.2
-
cpe:2.3:a:solarwinds:orion_platform:2017.1
-
cpe:2.3:a:solarwinds:orion_platform:2017.3
-
cpe:2.3:a:solarwinds:orion_platform:2018.2
-
cpe:2.3:a:solarwinds:orion_platform:2018.4
-
cpe:2.3:a:solarwinds:orion_platform:2019.2
-
cpe:2.3:a:solarwinds:orion_platform:2019.4
-
cpe:2.3:a:solarwinds:orion_platform:2019.4.2
-
cpe:2.3:a:solarwinds:orion_platform:2020.2
-
cpe:2.3:a:solarwinds:orion_platform:2020.2.1
-
cpe:2.3:a:solarwinds:orion_platform:2020.2.4
-
cpe:2.3:a:solarwinds:orion_platform:2020.2.5
-
cpe:2.3:a:solarwinds:orion_platform:2020.2.6
-
cpe:2.3:a:solarwinds:orion_platform:2022.2
-
cpe:2.3:a:solarwinds:orion_platform:2022.2.0