CVE-2021-35225: SolarWinds Network Performance Monitor

Medium severity, CVSS 6.4. EPSS: 0.8% chance of exploitation in the next 30 days.

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.

Affected products

• SolarWinds Network Performance Monitor: up to and including 2020.2.6; version 2020.2.6 only

Published 2021-10-21. Last modified 2026-06-17.