CVE-2021-35234: SolarWinds Orion Platform

High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.

Affected products

• SolarWinds Orion Platform: up to and including 2020.2.5; version 2020.2.6 only

Published 2021-12-20. Last modified 2026-06-17.