CVE-2023-50395CWE-89

SQL Injection Remote Code Execution Vulnerability

High · published February 6, 2024

CVSS v3.1
8.0
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01578 · 75.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2024-02-06T15:59Z
EPSS history
Timeline
  • 06 FEB 15:59Z
    SQL Injection Remote Code Execution Vulnerability
    cvelistv5