CVE-2022-38114

MEDIUM

SolarWinds Security Event Manager - HTTP Request Smuggling and XSS

Title source: llm

Description

This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lead to HTTP request smuggling or XSS.

References (2)

[Release Notes, Vendor Advisory] https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2022-4_release_notes.htm

[Vendor Advisory] https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-38114

Scores

CVSS v3 6.1

EPSS 0.0132

EPSS Percentile 80.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-444 CWE-79

Status published

Products (1)

solarwinds/security_event_manager < 2022.4

Published Nov 23, 2022

Tracked Since Feb 18, 2026