Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6
Priority LOW 25CWE-639Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-639.
Summary
Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00508 43rd percentileScored 2026-11-07
Fix Fixed SolarWinds Platform (SolarWinds): 2022.3
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2022.3 and previous to before 2022.3 | 2022.3 | Patch available | CNA |
- SolarWinds Platform VendorSolarWinds Affected 2022.3 and previous to before 2022.3 Fixed in 2022.3 Patch available CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:* | before 2020.2.6 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:-:*:*:*:*:*:* | 2020.2.6 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix1:*:*:*:*:*:* | 2020.2.6 hotfix1 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix2:*:*:*:*:*:* | 2020.2.6 hotfix2 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix3:*:*:*:*:*:* | 2020.2.6 hotfix3 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix4:*:*:*:*:*:* | 2020.2.6 hotfix4 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix5:*:*:*:*:*:* | 2020.2.6 hotfix5 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2022.2:*:*:*:*:*:*:* | 2022.2 | Vulnerable | SolarWinds |
| cpe:2.3:a:solarwinds:orion_platform:2022.3:*:*:*:*:*:*:* | 2022.3 | Vulnerable | SolarWinds |
- cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:* Versions before 2020.2.6 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:-:*:*:*:*:*:* Versions 2020.2.6 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix1:*:*:*:*:*:* Versions 2020.2.6 hotfix1 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix2:*:*:*:*:*:* Versions 2020.2.6 hotfix2 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix3:*:*:*:*:*:* Versions 2020.2.6 hotfix3 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix4:*:*:*:*:*:* Versions 2020.2.6 hotfix4 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix5:*:*:*:*:*:* Versions 2020.2.6 hotfix5 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2022.2:*:*:*:*:*:*:* Versions 2022.2 Vulnerable ·SolarWinds
- cpe:2.3:a:solarwinds:orion_platform:2022.3:*:*:*:*:*:*:* Versions 2022.3 Vulnerable ·SolarWinds
Remediation
- Fix · CNA SolarWinds Platform (SolarWinds) Fixed in 2022.3
Timeline
- 2026-10-02 Threatist record created from CVE-2022-36966
- 2026-10-03 Alias added: GHSA-259m-9wgg-gmjw
References
More SolarWinds Orion Platform vulnerabilities
- TI-2020-08199 Authentication bypass in SolarWinds Orion Platform KEVCVSS 3.1CRITICAL 9.8
- TI-2022-17164 SolarWinds Platform Deserialization of Untrusted Data CVSS 3.1HIGH 8.8
- TI-2022-17166 Orion Platform SQL Injection Privilege Escalation Vulnerability CVSS 3.1HIGH 8.8
- TI-2021-14112 Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability CVSS 3.1HIGH 8.9
- TI-2021-14109 ActionPluginBaseView Deserialization of Untrusted Data RCE CVSS 3.1HIGH 8.9
- TI-2022-17818 SolarWinds Platform Deserialization of Untrusted Data Vulnerability CVSS 3.1HIGH 7.2
Sources
- CVE-2022-36966 · CVE Program
- CVE-2022-36966 · NVD
- FIRST EPSS
- GHSA-259m-9wgg-gmjw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences