VULNERABILITY INTELLIGENCE

CVE-2022-36957

CVSS score7.2 HIGH

EPSS probability14.67%

CISA KEVNot currently listed

Published2022-10-20

Last modified2026-06-17

Description

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.