vulnerability

SolarWinds Orion Platform: SolarWinds Platform Incorrect Input Neutralization Vulnerability (CVE-2022-47509)

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Apr 21, 2023
Added
Jul 27, 2023
Modified
Jan 28, 2025

Description

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.

Solution

solarwinds-orion-platform-upgrade-2023_2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.