CVE-2022-36963 : faille élevée SolarWinds Platform Command Injection… (CVSS 7.2)

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

Sévérité

Élevée (CVSS 7.2)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

21 avr. 2023

Dernière mise à jour

5 févr. 2025

• SolarWinds Platform Command Injection Vulnerability SolarWinds Platform

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.2

• Fiche CVE-2022-36963 sur le NVD (NIST)
• solarwinds.com/trust-center/security-advisories/cve-2022-36963
• documentation.solarwinds.com/en/success_center/orionplatform/content/releas…