vulnerability
SolarWinds Orion Platform: SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVE-2023-23836)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:M/C:C/I:C/A:C) | Feb 15, 2023 | Jul 27, 2023 | Jan 28, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
Feb 15, 2023
Added
Jul 27, 2023
Modified
Jan 28, 2025
Description
SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.
Solution
solarwinds-orion-platform-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.