Description (CNA)
Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SolarWinds / Orion Platform | affected 2020.2.6 and previous versions before 2022.3.0 |
CWE
No CWE identifiers supplied.
References
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36965
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm#:~:text=Release%20date%3A%20May%2024%2C%202022%20These%20release%20notes%2Cissues.%20New%20features%20and%20improvements%20in%20SolarWinds%20Platform
ADP enrichment
No English description supplied.
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36965
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm#:~:text=Release%20date%3A%20May%2024%2C%202022%20These%20release%20notes%2Cissues.%20New%20features%20and%20improvements%20in%20SolarWinds%20Platform
No English description supplied.
No references supplied.