vulnerability
SolarWinds Platform: CVE-2022-36965: Stored and DOM XSS in QoE Applications: Orion Platform
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:A/AC:M/Au:M/C:C/I:P/A:P) | Sep 28, 2022 | Aug 5, 2025 | Aug 5, 2025 |
Severity
6
CVSS
(AV:A/AC:M/Au:M/C:C/I:P/A:P)
Published
Sep 28, 2022
Added
Aug 5, 2025
Modified
Aug 5, 2025
Description
Insufficient sanitization of inputs in QoE application input field could lead to stored and DOM based XSS attack. This issue is fixed and is part of the latest release for SolarWinds Platform (2022.3)
Solution
solarwinds-platform-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.