1. Home
  2. CVE Database
  3. CVE-2022-36965
MEDIUM · 6.1

CVE-2022-36965

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

Vulnerability Description

Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

CVSS Score

6.1

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SolarwindsSolarwinds Platform< 2022.3.0

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2022-36965?

CVE-2022-36965 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Insufficient sanitization of inputs in QoE application input field could lead to stored and Dom based XSS attack. This issue is fixed and released in SolarWinds Platform (2022.3.0).

How severe is CVE-2022-36965?

CVE-2022-36965 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-36965?

Check the references section above for vendor advisories and patch information. Affected products include: Solarwinds Solarwinds Platform.