CVE-2023-50395

8.0 highEPSS 1.6%

High (8.0) in solarwinds solarwinds platform. EPSS 1.6% chance of exploitation in the next 30 days.

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:solarwinds_platform

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395

Check your stack JSON