CVE-2021-35212: SolarWinds Orion Platform

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.

Affected products

• SolarWinds Orion Platform: version 2019.2 only; version 2019.4 only; version 2020.2.1 only; version 2020.2.4 only; version 2020.2.5 only

Published 2021-08-31. Last modified 2026-06-17.