High severity8.9NVD Advisory· Published Sep 1, 2021· Updated Jun 17, 2026

CVE-2021-35216

Description

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SolarWinds/Patch Manager Orion Platform Integrationllm-fuzzy
SolarWinds/Orion Patch Managercpe-rescue
Range: 2020.2.5 and previous versions.
SolarWinds/Patch Manager
cpe:2.3:a:solarwinds:patch_manager:*:*:*:*:*:*:*:*
Range: <2020.2.6

Patches

Vulnerability mechanics

References

www.solarwinds.com/trust-center/security-advisories/cve-2021-35216nvdPatchVendor Advisory
documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2020-2-6_release_notes.htmnvdRelease NotesVendor Advisory
www.zerodayinitiative.com/advisories/ZDI-21-1246/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.579
epss	0.065
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000