Remote code execution

2024-02-0616:15:00

PRIOn knowledge base

www.prio-n.com

remote code execution

solarwinds platform

sql injection

vulnerability

user authentication

9.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.9%

JSON

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited.

CPENameOperatorVersion
solarwinds_platformlt2024.1

CPE	Name	Operator	Version
	solarwinds_platform	lt	2024.1

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2023-35188