Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:npm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductNpm (8468a2d4-8236-59b6-a20d-fb5b6e0cd859)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35225 vulnerable 2026-06-08 05:32:48.551486 Netpath Horizontal Privilege Escalation Vulnerability: NPM 2020.2.5
MEDIUM (5)
Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.
Published: 2021-10-21T17:39:59.717Z
Updated: 2024-09-17T00:11:06.373Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.