High severity8.0NVD Advisory· Published Dec 20, 2021· Updated Jun 17, 2026
CVE-2021-35234
CVE-2021-35234
Description
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*range: <=2020.2.5
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:-:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix1:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix2:*:*:*:*:*:*
- SolarWinds/Orion Corev5Range: 2020.2.6 HF 2 and previous versions
Patches
Vulnerability mechanics
References
12- documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htmnvdProductVendor Advisory
- support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3nvdVendor Advisory
- www.solarwinds.com/trust-center/security-advisories/cve-2021-35234nvdVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-21-1596/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1597/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1598/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1599/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1600/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1601/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1602/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1603/nvdThird Party AdvisoryVDB Entry
- www.zerodayinitiative.com/advisories/ZDI-21-1604/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.