{"metadata": {"vulnerability": "CVE-2022-36966", "count": 26, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 15}}, "data": [{"timestamp": "2022-07-27T00:00:00Z", "date_only": false, "value": "2022-07-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-36966", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-16T20:42:04Z", "date_only": false, "value": "2022-08-16T20:42:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10076", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "d88a1a5f-b695-4fca-a427-ff2d9a557314", "content": "\u25cf CVE-2022-36966 has been assigned as the Zero-Day for the escalation of privilege in Orion platform.\n\nThe exploit requires internal + initial access. Details will be shared as SolarWinds provides official feedback.\n\nThe vulnerability was identified by researcher 'Asim Khan' \ud83c\uddf5\ud83c\uddf0", "url": "https://t.me/cKure/10076"}, {"timestamp": "2022-10-18T16:00:00Z", "date_only": false, "value": "2022-10-18T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / SolarWinds", "record": "CVE-2022-36966", "field": "containers.cna.datePublic"}, {"timestamp": "2022-10-20T00:00:00Z", "date_only": false, "value": "2022-10-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-939", "record": "CERTFR-2022-AVI-939", "field": "last_revision_date"}, {"timestamp": "2022-10-20T00:00:00Z", "date_only": false, "value": "2022-10-20T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-939", "record": "CERTFR-2022-AVI-939", "field": "initial_release_date"}, {"timestamp": "2022-10-20T00:00:00Z", "date_only": false, "value": "2022-10-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-939", "record": "CERTFR-2022-AVI-939", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-20T20:05:35.645Z", "date_only": false, "value": "2022-10-20T20:05:35.645Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-36966", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-20T21:15:00Z", "date_only": false, "value": "2022-10-20T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-259M-9WGG-GMJW", "record": "GHSA-259M-9WGG-GMJW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-10-20T21:15:00Z", "date_only": false, "value": "2022-10-20T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-36966", "record": "GSD-2022-36966", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-10-20T21:15:10.050Z", "date_only": false, "value": "2022-10-20T21:15:10.050", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36966", "record": "FKIE_CVE-2022-36966", "field": "published"}, {"timestamp": "2022-10-21T00:29:54Z", "date_only": false, "value": "2022-10-21T00:29:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/51910", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "0f0b9cfa-f368-40e7-a1eb-573f946fb351", "content": "\u203c CVE-2022-36966 \u203c\n\nUsers with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/51910"}, {"timestamp": "2022-10-21T06:06:26Z", "date_only": false, "value": "2022-10-21T06:06:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/10334", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "40229d96-3fd2-42b7-a326-84eef361f558", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Insecure Direct Object Reference Vulnerability: SolarWinds Platform 2022.3 (CVE-2022-36966).\n\nhttps://www.solarwinds.com/trust-center/security-advisories/cve-2022-36966", "url": "https://t.me/cKure/10334"}, {"timestamp": "2022-10-21T06:06:55Z", "date_only": false, "value": "2022-10-21T06:06:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ckuRED/205", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "011e65b0-a4c3-48f1-aedc-02982847044f", "content": "Insecure Direct Object Reference Vulnerability: SolarWinds Platform 2022.3 (CVE-2022-36966). \n \nhttps://www.solarwinds.com/trust-center/security-advisories/cve-2022-36966", "url": "https://t.me/ckuRED/205"}, {"timestamp": "2022-10-21T12:00:16Z", "date_only": false, "value": "2022-10-21T12:00:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-259M-9WGG-GMJW", "record": "GHSA-259M-9WGG-GMJW", "field": "published"}, {"timestamp": "2022-10-21T19:01:09Z", "date_only": false, "value": "2022-10-21T19:01:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-259M-9WGG-GMJW", "record": "GHSA-259M-9WGG-GMJW", "field": "modified"}, {"timestamp": "2022-12-24T10:53:07Z", "date_only": false, "value": "2022-12-24T10:53:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3626", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "c075404b-1159-49ea-b0c0-8a291b193284", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2022-36966\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3626"}, {"timestamp": "2023-01-29T12:39:15Z", "date_only": false, "value": "2023-01-29T12:39:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2565", "record": "CVE-2022-36966", "field": "creation_timestamp", "uuid": "8316aeee-815c-4d09-a52c-821adc49b4bf", "content": "#CVE-2022\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-20607\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-4646\n\nPoC for the CVE-2022-41082 Vulnerability Effecting Microsoft Exchange Servers\n\nhttps://github.com/balki97/CVE-2022-41082-POC\n\nCVE-2022-2602\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\nCVE-2022-2602\nhttps://github.com/Live-Hack-CVE/CVE-2022-4633\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-25574\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-36966\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2565"}, {"timestamp": "2023-08-03T16:58:36.397Z", "date_only": false, "value": "2023-08-03T16:58:36.397Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / SolarWinds", "record": "CVE-2022-36966", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-03T17:15:00Z", "date_only": false, "value": "2023-08-03T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-36966", "record": "GSD-2022-36966", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:21.884Z", "date_only": false, "value": "2023-12-13T01:19:21.884534Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-36966", "record": "GSD-2022-36966", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T10:21:32.223Z", "date_only": false, "value": "2024-08-03T10:21:32.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-36966", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-07T20:49:47.424Z", "date_only": false, "value": "2025-05-07T20:49:47.424331Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-36966", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-07T20:49:47.424Z", "date_only": false, "value": "2025-05-07T20:49:47.424331Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36966", "record": "FKIE_CVE-2022-36966", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-07T20:49:50.846Z", "date_only": false, "value": "2025-05-07T20:49:50.846Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-36966", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-07T20:49:50.846Z", "date_only": false, "value": "2025-05-07T20:49:50.846Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-36966", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:54:22.080Z", "date_only": false, "value": "2026-06-17T04:54:22.080", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-36966", "record": "FKIE_CVE-2022-36966", "field": "lastModified"}]}