vulnerability

SolarWinds Orion Platform: SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVE-2023-23836)

Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
Feb 15, 2023
Added
Jul 27, 2023
Modified
Jan 28, 2025

Description

SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.

Solution

solarwinds-orion-platform-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.