EUVD-2021-21864

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Improper Access Control Tampering allows Remote Code Execution via ImportAlert function in Alerts Settings.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-35221	31 Aug 202116:33	–	circl
CNNVD	SolarWinds Orion Platform 安全漏洞	31 Aug 202100:00	–	cnnvd
CNVD	SolarWinds Orion Platform has an unspecified vulnerability (CNVD-2021-101209)	2 Sep 202100:00	–	cnvd
CVE	CVE-2021-35221	31 Aug 202112:13	–	cve
Cvelist	CVE-2021-35221 ImportAlert Improper Access Control Tampering Vulnerability	31 Aug 202112:13	–	cvelist
NVD	CVE-2021-35221	31 Aug 202113:15	–	nvd
OSV	CVE-2021-35221	31 Aug 202113:15	–	osv
Prion	Improper access control	31 Aug 202113:15	–	prion
Positive Technologies	PT-2021-20846 · Solarwinds · Oroplatform	31 Aug 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-35221	22 May 202520:36	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "db08e45a-fb8d-3d06-ab61-74b6a1c5d56f",
        "vendor": {
          "name": "SolarWinds "
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "55f10724-5c4e-3edd-9fdf-0d7e8c97db82",
        "product": {
          "name": "Orion Platform"
        },
        "product_version": "2020.2.6 and previous versions  ≤2020.2.6 HF1"
      }
    ]
  }
]

Source	Link
documentation	www.documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
support	www.support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1
solarwinds	www.solarwinds.com/trust-center/security-advisories/cve-2021-35221
support	www.support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ImportAlert-Improper-Access-Control-Tampering-Vulnerability-CVE-2021-35221
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8High risk

Vulners AI Score8

CVSS 3.16.3 - 8.1

CVSS 25.5

EPSS0.00392