Lucene search
HistoryApr 21, 2023 - 8:15 p.m.
CVE-2022-47509
solarwinds
vulnerability
incorrect input neutralization
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.3%
The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.
Affected configurations
Node
solarwindsorion_platformRange<2023.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| solarwinds | orion_platform | * | cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2022-47509
2023-04-21 20:15:07
prion
prion
Input validation
2023-04-21 20:15:00
nessus
nessus
SolarWinds Platform 2023.0 < 2023.2 Multiple Vulnerabilities
2023-04-18 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.3%
Related for NVD:CVE-2022-47509