CVE-2023-40056

Summary

SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account.

Affected Software

VendorProductVersion RangeStatus
SolarWindsSolarWinds Platform2023.4.1 and previous versionsaffected

Weaknesses

  • CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADP Enrichment

CVE Program Container

Additional References

References