What’s Vulnerable › Vulnerabilities

CVE-2022-23858

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-24 · updated 2026-06-17

Description

A flaw was found in the REST API. An improperly handled REST API call could allow any logged user to elevate privileges up to the system account. This affects StarWind Command Center build 6003 v2.

Affected products

• Starwindsoftware Command Center: 2-build_6003

References

• https://www.starwindsoftware.com/security/sw-20220121-0001/
• https://www.starwindsoftware.com/security/sw-20220121-0001/

Get alerted when CVE-2022-23858 or the next vulnerability affects your stack