Riskcovery

CVE-2022-36962

SolarWinds Platform Command Injection

State
Published
Severity
7.2 High
Published
Nov 29, 2022
Updated
Apr 25, 2025
Reserved
Jul 27, 2022

Read the record on cve.org

Description

SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.

Scores

CVSSScoreVectorSource
3.17.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HSolarWinds

Weaknesses

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

ProductVersions
SolarWinds PlatformSolarWinds
  • 2022.3 and prior versions through 2022.3Affected
Orion PlatformSolarWinds
  • 2020.2.6 HF5 and prior versions through 2020.2.6 HF5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.