CVE-2022-36960CWE-20CWE-287

SolarWinds Platform Improper Input Validation

High · published November 29, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to escalate user privileges.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00948 · 60.8th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-287 · Improper Authentication
Published
2022-11-29T20:43Z
EPSS history
Timeline
  • 29 NOV 20:43Z
    SolarWinds Platform Improper Input Validation
    cvelistv5