[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKpTfraXmqD0uQbcg_DRmQmiEzzQBxfwZ5s9fkFAeHdw":3,"g5a-risk:CVE-2023-40056":108},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":57,"weaknesses":58,"weaknessesCount":46,"isActivelyExploited":67,"cisaInfo":26,"otxData":26,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":103,"notableEvents":104},"CVE-2023-40056","What is CVE-2023-40056?","SQL Injection Remote Code Vulnerability was found in the SolarWinds\nPlatform. This vulnerability can be exploited with a low privileged account.","SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account.","2023-11-28T18:15:07.9","2023-12-04T18:51:22.073",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"psirt@solarwinds.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":35,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK",8,2.1,0.04814,[37,37,37,37,37,37,37],"High",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"solarwinds","solarwinds_platform","*","cpe:2.3:a:solarwinds:solarwinds_platform:*:*:*:*:*:*:*:*",1,[48,53],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fdocumentation.solarwinds.com\u002Fen\u002Fsuccess_center\u002Forionplatform\u002Fcontent\u002Frelease_notes\u002Fsolarwinds_platform_2023-4-2_release_notes.htm","Solarwinds",[52],"Release Notes",{"url":54,"source":50,"tags":55},"https:\u002F\u002Fwww.solarwinds.com\u002Ftrust-center\u002Fsecurity-advisories\u002FCVE-2023-40056",[56],"Vendor Advisory",2,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2023-40056? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-40056, a high severity cyber security vulnerability from 2023. SQL Injection Remote Code Vulnerability was found in the So...","CVE-2023-40056, CVE-2023-40056 vulnerability, CVE-2023-40056 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, solarwinds security, solarwinds_platform vulnerability","\u002Fwhat-is\u002Fcve-2023-40056",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-40056","Cybersecurity","CVE-2023-40056, CVE-2023-40056 vulnerability, CVE-2023-40056 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":26,"Negate":26,"Nodes":96},[97],{"Operator":98,"Negate":26,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":101,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":102,"VersionEndIncluding":26},"5C3B0A46-E7A1-4BBB-96B0-6F074FE6ACC7","2023.4.2",[],[],{"lastModified":11,"cacheTime":106,"version":107},1793387698293,"2.0",{"score":109,"band":110,"action":111,"scoredAt":112},48,"Medium","Plan remediation","2026-10-30T06:59:55.590333+00:00"]