SolarWinds Platform vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SP

Product

SolarWinds Platform

by SolarWinds · last CVE Feb 11, 2025

31

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities31 In the news0 Timeline

Severity mix

Critical 1High 16Medium 11Low 3

Severity

All severities31 Critical1 High16 Medium11 Low3

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add SolarWinds Platform to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-40056	8.8	5%	Nov 28	SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform Affected: before 2023.4.2
CVE-2023-40062	8.8	3%	Nov 1	SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability Affected: before 2023.4
CVE-2023-40061	8.8	0%	Nov 1	Insecure job execution mechanism vulnerability Affected: before 2023.4
CVE-2022-36958	8.8	82%	Oct 20	SolarWinds Platform Deserialization of Untrusted Data Affected: through 2022.3 and prior versions
CVE-2023-50395	8.0	2%	Feb 6	SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform Affected: before 2024.1
CVE-2023-35188	8.0	2%	Feb 6	SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform Affected: before 2024.1
CVE-2024-45710	7.8	0%	Oct 16	SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability Affected: before 2024.4
CVE-2024-28999	7.5	14%	Jun 4	The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console Affected: before 2024.2
CVE-2024-28996	7.5	0%	Jun 4	The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability Affected: before 2024.2
CVE-2024-29001	7.4	1%	Apr 18	A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface Affected: before 2024.1.1
CVE-2023-33225	7.2	3%	Jul 26	The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability Affected: before 2023.3.0
CVE-2023-33224	7.2	3%	Jul 26	The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability Affected: before 2023.3.0
CVE-2023-23844	7.2	3%	Jul 26	The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability Affected: before 2023.3.0
CVE-2023-23843	7.2	3%	Jul 26	The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability Affected: before 2023.3.0
CVE-2022-38108	7.2	66%	Oct 20	SolarWinds Platform Deserialization of Untrusted Data Affected: through 2022.3 and prior versions
CVE-2022-36957	7.2	15%	Oct 20	SolarWinds Platform Deserialization of Untrusted Data Affected: through 2022.3 and prior versions