CVE-2023-33224

7.2 highEPSS 2.8%

High (7.2) in solarwinds solarwinds platform. EPSS 2.8% chance of exploitation in the next 30 days.

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-696
Published: 2023-07-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:solarwinds_platform

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224

Check your stack JSON