SolarWinds SolarWinds Platform

Name: SolarWinds SolarWinds Platform
Brand: SolarWinds

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical20high7medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-38108US	high7.2	65.9% (99th)	Exploit	no fix	2022-10-20	≤ unspecified ≤2022.3 and prior versions
CVE-2022-38111US	high7.2	84.8% (100th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions ≤2022.4.1
CVE-2022-36958US	high8.8	81.5% (100th)	—	no fix	2022-10-20	≤ unspecified ≤2022.3 and prior versions
CVE-2023-23836US	high7.2	80.3% (100th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions ≤2022.4.1
CVE-2022-47504US	high7.2	41.9% (99th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions ≤2022.4.1
CVE-2022-47503US	high7.2	41.0% (99th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions 2022.4.1
CVE-2022-36964US	high8.8	17.4% (97th)	—	no fix	2022-11-29	≤ 2022.3 and prior versions ≤2022.3
CVE-2022-36957US	high7.2	14.7% (97th)	—	no fix	2022-10-20	≤ unspecified ≤2022.3 and prior versions
CVE-2022-47507US	high7.2	12.9% (96th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions ≤2022.4.1
CVE-2022-36962US	high7.2	9.19% (95th)	—	no fix	2022-11-29	≤ 2022.3 and prior versions ≤2022.3
CVE-2023-23845US	high7.2	5.43% (93rd)	—	2023.3.1	2023-09-13	0 → 2023.3.1
CVE-2023-23840US	high7.2	5.43% (93rd)	—	2023.3.1	2023-09-13	0 → 2023.3.1
CVE-2023-33225US	—	3.21% (88th)	—	2023.3	2023-07-26	0 → 2023.3
CVE-2023-23844US	high7.2	3.00% (87th)	—	2023.3	2023-07-26	0 → 2023.3
CVE-2023-33224US	high7.2	2.79% (86th)	—	2023.3	2023-07-26	0 → 2023.3
CVE-2023-23843US	high7.2	2.56% (85th)	—	2023.3	2023-07-26	0 → 2023.3
CVE-2023-23839US	medium6.5	1.08% (65th)	—	2023.2	2023-04-25	2023.1 and prior versions → 2023.2
CVE-2022-36960US	high8.8	0.95% (61st)	—	2022.3	2022-11-29	2022.3 and prior versions → 2022.3
CVE-2023-33229US	—	0.77% (55th)	—	2023.3	2023-07-26	0 → 2023.3
CVE-2022-47506US	high7.8	0.63% (50th)	—	no fix	2023-02-15	≤ 2022.4.1 and prior versions 2022.4.1
CVE-2024-52612US	medium4.8	0.54% (45th)	—	no fix	2025-02-11	≤ 2024.4.1 and previous versions
CVE-2022-47509US	medium6.1	0.51% (43rd)	—	no fix	2023-04-21	≤ 2023.1 and prior versions ≤2023.2
CVE-2022-36966US	medium5.4	0.50% (42nd)	—	2022.3	2022-10-20	2022.3 and previous → 2022.3
CVE-2024-29000US	medium4.3	0.46% (40th)	—	no fix	2024-05-20	≤ 2024.1 and Previous Versions
CVE-2024-45717US	medium4.8	0.38% (31st)	—	no fix	2024-12-04	≤ SolarWinds Platform 2024.4 and prior versions
CVE-2024-52611US	—	0.35% (29th)	—	no fix	2025-02-11	≤ 2024.4.1 and previous versions
CVE-2024-28996US	high7.5	0.35% (28th)	—	no fix	2024-06-04	≤ 2024.1.1 and previous versions
CVE-2024-45715US	medium5.2	0.34% (28th)	—	no fix	2024-10-16	≤ SolarWinds Platform 2024.2.1 and previous versions
CVE-2024-45710US	high7.8	0.28% (20th)	—	no fix	2024-10-16	≤ SolarWinds Platform 2024.2.1 and previous versions
CVE-2022-47505US	high7.8	0.24% (15th)	—	no fix	2023-04-21	≤ 2023.1 and prior versions ≤2023.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data9 CVEs
CWE-697Incorrect Comparison5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-184Incomplete List of Disallowed Inputs1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan