SolarWinds Platform 2023.4.0 < 2024.1 Multiple Vulnerabilities SQLI

The version of SolarWinds Platform installed on the remote host is prior to 2024.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20241 advisory. - SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWind...

CVE-2023-35188

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-35188

CVE-2023-35188 is a SQL Injection with Remote Code Execution in the SolarWinds Platform (SolarWinds Orion Platform). The flaw exists in the AppendCreatePrimary path and, when authenticated, allows crafting SQL queries to execute code with SYSTEM-level privileges. Affected products/versions includ...

CVE-2023-35188 SQL Injection Remote Code Execution Vulnerability

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...