CVE-2021-35220

概要

参考情報

• documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm · Patch
• support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-EmailWebPage-Command-Injection-RCE-CVE-2021-35220 · Mitigation
• support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1 · Patch
• solarwinds.com/trust-center/security-advisories/cve-2021-35220 · Vendor Advisory

orion platform のその他の脆弱性

• CVE-2023-23845高 7.2The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative acces…
• CVE-2023-23840高 7.2The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative acces…
• CVE-2022-47509中 6.1The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary wi…
• CVE-2022-47505高 7.8The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a …
• CVE-2022-36963高 7.2The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid So…