CVE-2021-35238

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SolarWinds	Orion Platform	>= 2020.2.6 and previous versions, < 2020.2.6 HF1

References

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmProduct, Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_USMitigation, Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35238Broken Link
https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmProduct, Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_USMitigation, Vendor Advisory
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35238Broken Link

Timeline

Published: Sep 1, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-352395.4A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.CVE-2021-35246.5A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the i CVE-2021-352404.8A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel CVE-2021-352428.8Serv-U server responds with valid CSRFToken when the request contains only Session.CVE-2021-352437.5The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to execute dangerous HTTP CVE-2021-352447.2The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any CVE-2021-352456.8When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host ma CVE-2021-352465.3The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's ne CVE-2021-352475.3Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the inpu CVE-2021-352484.3It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic se CVE-2021-352494.3This broken access control vulnerability pertains specifically to a domain admin who can access configuration & user data of other domains w CVE-2021-352507.5A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installati