CVE-2022-36966: SolarWinds Orion Platform

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.

Affected products

• SolarWinds Orion Platform: before 2020.2.6 (fixed in 2020.2.6); version 2020.2.6 only; version 2022.2 only; version 2022.3 only

Published 2022-10-20. Last modified 2026-06-17.