Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:orion:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductOrion (0dfd7b61-a5f7-52e8-91ed-104428aa417d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35248 vulnerable 2026-06-08 05:32:48.589111 Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users
MEDIUM (6.8)
It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.
Published: 2021-12-20T20:08:24.068Z
Updated: 2024-09-16T20:07:13.877Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.