Skip to content
OpenAdvisories

Product · SolarWinds

Orion

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2021-35248

    Unrestricted access to Orion.UserSettings SWIS entity for low-privilege users

    It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.

    SolarWinds Orion