NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-3109

CVSS 3.1: 4.8 medium
EPSS: <1%p53
Published: Mar 26, 2021 · Mar 26, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-3109 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account.

Vendors: solarwinds

Products: orion platform

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

2 stories

Solarwinds Orion Platform updates fix two remote code execution issues

Security AffairsMar 26, 14:37 UTC · Mar 26, 2021VulnerabilityCVE-2021-3109 CVE-2020-358561

60

Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

The Hacker NewsMar 26, 05:07 UTC · Mar 26, 2021VulnerabilityCVE-2020-35856 CVE-2021-3109 CVE-2021-25274+11 · 1 read

60