CVE-2023-50395

SQL Injection Remote Code Execution Vulnerability

State: Published
Severity: 8.0 High
Published: Feb 6, 2024
Updated: Jun 13, 2025
Reserved: Dec 7, 2023

Description

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

Scores

CVSS	Score	Vector	Source
3.1	8.0 High	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	SolarWinds

Weaknesses

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected Products

Product	Versions
SolarWinds PlatformSolarWinds	2023.4.2 and previous version Affected

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.