CVE-2023-40062

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.
Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*

History

09 Nov 2023, 13:40

Type Values Removed Values Added
References (MISC) https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40062 - (MISC) https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40062 - Patch, Vendor Advisory
References (MISC) https://documentation.solarwinds.com/en/success_center/hco/content/release_notes/hco_2023-4_release_notes.htm - (MISC) https://documentation.solarwinds.com/en/success_center/hco/content/release_notes/hco_2023-4_release_notes.htm - Release Notes
CPE cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*
First Time Solarwinds
Solarwinds solarwinds Platform
CVSS v2 : unknown
v3 : 8.0
v2 : unknown
v3 : 8.8

01 Nov 2023, 16:16

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-01 16:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-40062

Mitre link : CVE-2023-40062

CVE.ORG link : CVE-2023-40062


JSON object : View

Products Affected

solarwinds

  • solarwinds_platform
CWE
CWE-20

Improper Input Validation