CVE-2022-36963: SolarWinds Platform Deserialization of Untrusted Data Vulnerability

SolarWinds Platform Deserialization of Untrusted Data Vulnerability

Status

Published

2023-04-21

Updated

2025-02-05

Assigning organization

SolarWinds

Description

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SolarWinds Platform Command Injection Vulnerability SolarWinds Platform

Default version status: unaffected

2023.1 and prior versions to ≤ 2023.2affected

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36963 ↗
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm ↗