Medium severity5.0NVD Advisory· Published Oct 21, 2021· Updated Jun 17, 2026
CVE-2021-35225
CVE-2021-35225
Description
Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- SolarWinds/NPMv5Range: 2020.2.6 Hotfix 1 and previous versions
cpe:2.3:a:solarwinds:network_performance_monitor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:solarwinds:network_performance_monitor:*:*:*:*:*:*:*:*range: <=2020.2.6
- cpe:2.3:a:solarwinds:network_performance_monitor:2020.2.6:hotfix1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmnvdVendor Advisory
- support.solarwinds.com/SuccessCenter/s/article/NPM-2020-2-6-Hotfix-2nvdRelease NotesVendor Advisory
- www.solarwinds.com/trust-center/security-advisories/cve-2021-35225nvdVendor Advisory
News mentions
0No linked articles in our index yet.