Lucene search

SolarWindsVULNRICHMENT:CVE-2024-28996

HistoryJun 04, 2024 - 2:49 p.m.

CVE-2024-28996 SolarWinds Platform SWQL Injection Vulnerability

2024-06-0414:49:53

CWE-89

SolarWinds

github.com

solarwinds

swql injection

vulnerability

high attack complexity

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

39.1%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*"
    ],
    "vendor": "solarwinds",
    "product": "solarwinds_platform",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2024.1.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-2_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/CVE-2024-28996

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

39.1%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-28996