VULNERABILITY INTELLIGENCE
CVE-2022-47505
CVSS score7.8 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2023-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.
Weakness classification
- psirt@solarwinds.com: CWE-269
- nvd@nist.gov: CWE-269
Primary references
- psirt@solarwinds.com — Release Notes
- psirt@solarwinds.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory