CVE-2021-35248

—

CVSS 3.1

4.3 medium

EPSS

<1%p57

Published

Dec 20, 2021 (Dec 20, 2021)

Modified

Jun 17, 2026

Description

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.

Vendors: solarwinds
Products: orion platform
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.