CVE-2022-38115 MEDIUM

CVE-2022-38115: Insecure Methods Vulnerability

Vendor Solarwinds
Product SolarWinds SEM
Weakness CWE-650
Published November 23, 2022
Last update April 24, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT

Key dates

02Disclosure timeline

November 23, 2022 CVE published
April 24, 2025 Record updated