CVE-2022-36961

CVE-2022-36961 describes a SQL Injection vulnerability within the SolarWinds Orion Platform. An authenticated attacker could exploit this flaw to achieve privilege escalation or remote code execution, posing a significant risk to affected systems. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, leading to high impacts on confidentiality, integrity, and availability. Despite its high severity and potential impact, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.