CVE-2023-33229

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject passive HTML.

• CWE-94
• CWE-94

• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htmRelease Notes, Vendor Advisory
• https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33229Vendor Advisory
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htmRelease Notes, Vendor Advisory
• https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33229Vendor Advisory

Published

Jul 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-33222 When handling contactless cards, usage of a specifi…9.8
• CVE-2023-33224The SolarWinds Platform was susceptible to the Incorrect Beh…7.2
• CVE-2023-33225The SolarWinds Platform was susceptible to the Incorrect Com…7.2
• CVE-2023-33226The Network Configuration Manager was susceptible to a Direc…8.8
• CVE-2023-33227The Network Configuration Manager was susceptible to a Direc…8.8
• CVE-2023-33228The SolarWinds Network Configuration Manager was susceptible…4.9
• CVE-2023-3323 A vulnerability exists by allowing low-privileged users to …5.4
• CVE-2023-33231XSS attack was possible in DPA 2023.2 due to insufficient in…6.1
• CVE-2023-33234Arbitrary code execution in Apache Airflow CNCF Kubernetes p…7.2
• CVE-2023-33235MXsecurity version 1.0 is vulnearble to command injection vu…8.8
• CVE-2023-33236MXsecurity version 1.0 is vulnearble to hardcoded credential…9.8
• CVE-2023-33237TN-5900 Series firmware version v3.3 and prior is vulnerable…8.8