CVE-2022-36966

—

CVSS 3.1

5.4 medium

EPSS

<1%p36

Published

Oct 20, 2022 (Oct 20, 2022)

Modified

Jun 17, 2026

Description

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.

Vendors: solarwinds
Products: orion platform
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.