CVE-2021-35216

HIGH 8.8CVE-2021-35216 · Published 01/09/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
patch manager solarwinds	`< 2020.2.6`	`2020.2.6`

Description

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

References

documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2020-2-6_release_notes.htm · Release Notes
solarwinds.com/trust-center/security-advisories/cve-2021-35216 · Patch
zerodayinitiative.com/advisories/ZDI-21-1246 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free