CVE-2022-36961 — Orion Platform SQL Injection Privilege Escalation Vulnerability

Description (CNA)

A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution.

Affected (CNA)

Vendor / product	Versions
SolarWinds / Orion Platform	affected 2022.2.3 and previous versions before 2022.2.3

CWE

CWE-89

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36961
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/cve-2022-36961
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.