CVE-2024-28996

—

CVSS 3.1

7.5 high

EPSS

<1%p28

Published

Jun 4, 2024 (Jun 4, 2024)

Modified

Jun 17, 2026

Description

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.

Vendors: solarwinds
Products: solarwinds platform
Weakness: CWE-89
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news1 stories

SolarWinds fixed multiple flaws in Serv

Security AffairsJun 7, 21:37 UTC · Jun 7, 2024Exploit / PoC CVE-2024-28996 CVE-2024-28999 CVE-2024-29004

60