CVE-2021-35214: SolarWinds Pingdom

Medium severity, CVSS 4.7. EPSS: 1.8% chance of exploitation in the next 30 days.

The vulnerability in SolarWinds Pingdom can be described as a failure to invalidate user session upon password or email address change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could be changed without terminating the user session. This issue has been resolved on September 13, 2021.

Affected products

• SolarWinds Pingdom: before 13.09.2021 (fixed in 13.09.2021)

Published 2021-10-12. Last modified 2026-06-17.