EUVD-2021-21863

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Command Injection vulnerability in EmailWebPage API may allow Remote Code Execution from Alerts Settings page.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-35220	31 Aug 202116:33	–	circl
CNNVD	SolarWinds Orion Platform 命令注入漏洞	31 Aug 202100:00	–	cnnvd
CNVD	SolarWinds Orion Platform has an unspecified vulnerability (CNVD-2021-69604)	2 Sep 202100:00	–	cnvd
CVE	CVE-2021-35220	31 Aug 202111:03	–	cve
Cvelist	CVE-2021-35220 EmailWebPage Command Injection RCE	31 Aug 202111:03	–	cvelist
NVD	CVE-2021-35220	31 Aug 202112:15	–	nvd
OSV	CVE-2021-35220	31 Aug 202112:15	–	osv
Prion	Command injection	31 Aug 202112:15	–	prion
RedhatCVE	CVE-2021-35220	6 Feb 202503:18	–	redhatcve
Tenable Nessus	SolarWinds Orion Platform < 2020.2.6 HF1 Multiple Vulnerabilities	22 Oct 202100:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "39f6bcb1-f4f6-3db6-91d8-889b8aad4c9f",
        "vendor": {
          "name": "SolarWinds "
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "32fa037e-b4e0-3823-a7d9-fc6c9f227df7",
        "product": {
          "name": "Orion Platform"
        },
        "product_version": "2020.2.6 and previous versions  ≤2020.2.6 HF1"
      }
    ]
  }
]

Source	Link
support	www.support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1
solarwinds	www.solarwinds.com/trust-center/security-advisories/cve-2021-35220
support	www.support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-EmailWebPage-Command-Injection-RCE-CVE-2021-35220
documentation	www.documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2 - 8.1

CVSS 26.5

EPSS0.00879