CVE-2022-36965

6.1 mediumEPSS 0.8%

Medium (6.1) in solarwinds solarwinds platform. EPSS 0.8% chance of exploitation in the next 30 days.

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:solarwinds_platform

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm#:~:text=Release%20date%3A%20May%2024%2C%202022%20These%20release%20notes%2Cissues.%20New%20features%20and%20improvements%20in%20SolarWinds%20Platform
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36965
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2022-3_release_notes.htm#:~:text=Release%20date%3A%20May%2024%2C%202022%20These%20release%20notes%2Cissues.%20New%20features%20and%20improvements%20in%20SolarWinds%20Platform
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36965

Check your stack JSON