CVEDB API

SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 27.7%

CVSS Severity

CVSS v3 Score 8.0

References

Products affected by CVE-2023-40056

Solarwinds » Solarwinds Platform » Version: N/A

cpe:2.3:a:solarwinds:solarwinds_platform:-
Solarwinds » Solarwinds Platform » Version: 2022.2.0

cpe:2.3:a:solarwinds:solarwinds_platform:2022.2.0
Solarwinds » Solarwinds Platform » Version: 2022.3.0

cpe:2.3:a:solarwinds:solarwinds_platform:2022.3.0
Solarwinds » Solarwinds Platform » Version: 2022.4.0

cpe:2.3:a:solarwinds:solarwinds_platform:2022.4.0
Solarwinds » Solarwinds Platform » Version: 2023.1.0

cpe:2.3:a:solarwinds:solarwinds_platform:2023.1.0
Solarwinds » Solarwinds Platform » Version: 2023.2.0

cpe:2.3:a:solarwinds:solarwinds_platform:2023.2.0
Solarwinds » Solarwinds Platform » Version: 2023.3.0

cpe:2.3:a:solarwinds:solarwinds_platform:2023.3.0
Solarwinds » Solarwinds Platform » Version: 2023.4

cpe:2.3:a:solarwinds:solarwinds_platform:2023.4
Solarwinds » Solarwinds Platform » Version: 2023.4.1

cpe:2.3:a:solarwinds:solarwinds_platform:2023.4.1