CVE-2022-36965

—

CVSS 3.1

6.1 medium

EPSS

<1%p48

Published

Sep 30, 2022 (Sep 30, 2022)

Modified

Jun 17, 2026

Description

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

Vendors: solarwinds
Products: solarwinds platform
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.