CVE-2022-36961: Orion Platform SQL Injection Privilege Escalation Vulnerability

Orion Platform SQL Injection Privilege Escalation Vulnerability

Status

Published

2022-09-30

Updated

2025-05-20

Assigning organization

SolarWinds

Description

A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Orion Platform

Default version status: unaffected

2022.2.3 and previous versions to < 2022.2.3affected

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36961 ↗
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm ↗