CVE-2022-38113 MEDIUM

CVE-2022-38113: Information Disclosure Vulnerability

Vendor Solarwinds
Product SolarWinds SEM
Weakness CWE-200 · Info exposure
Published November 23, 2022
Last update April 25, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

This vulnerability discloses build and services versions in the server response header.

Key dates

02Disclosure timeline

November 23, 2022 CVE published
April 25, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-43938 Elcomplus SmartPTT SCADA Server Information Exposure CVE-2024-52523 Nextcloud Server Custom defined credentials of external storages are sent back to the frontend CVE-2022-25594 Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor CVE-2026-1407 Beetel 777VR1 UART information disclosure CVE-2022-2117 GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure