{"id":"CVE-2021-35215","published":"2021-09-01T14:21:46Z","modified":"2024-09-16T19:52:15Z","title":"ActionPluginBaseView Deserialization of Untrusted Data RCE","vendor":"SolarWinds","product":"Orion Platform","tier":"core","eol":null,"affectedVersions":[{"vendor":"SolarWinds","product":"Orion Platform","versions":[">= 2020.2.5 and previous versions, < 2020.2.6"]}],"description":{"text":"Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.","provenance":"source","from":"CVE.org"},"summary":{"text":"The vulnerability is an insecure deserialization flaw in the ActionPluginBaseView component of SolarWinds' Orion Platform, which the vulnerability record places in version 2020.2.5. An attacker who has valid credentials can exploit it to execute code remotely, requiring only authenticated access with no user interaction, though the attack vector is adjacent rather than fully network-reachable.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:11:56Z"},"cvss":{"score":8.9,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.69731,"percentile":0.99366,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":3,"pulses":[{"name":"ripe.arin.enom.cpanel.cpcalendar.iana.networksolutions.02050.webdisk.webmail.","url":"https://otx.alienvault.com/pulse/69fdc02bea1e4ec923b01688","created":"2026-05-08"},{"name":"SCANID: S-KhOoOrXsco8: Thor Lite Linux 64 - Sample Lab Device 2 - incomplete (not enriched)","url":"https://otx.alienvault.com/pulse/67c6bb5aa601e91b1314ff44","created":"2025-03-04"},{"name":"Thor Lite Scan - 10.7.15 - Ubuntu Scan on Archived Files","url":"https://otx.alienvault.com/pulse/664cc3c1938ed0b9abf026a2","created":"2024-05-21"}],"provenance":"machine"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm","tags":["x_refsource_MISC"]},{"url":"https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35215","tags":["x_refsource_MISC"]},{"url":"https://documentation.solarwinds.co/enm/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1245/","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-21858","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-21858","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-10-23","earliestUrl":"https://github.com/Y4er/CVE-2021-35215","repos":[{"name":"Y4er/CVE-2021-35215","url":"https://github.com/Y4er/CVE-2021-35215","stars":47,"created":"2021-10-23"}]},"first":{"date":"2021-10-23","source":"PoC-in-GitHub","url":"https://github.com/Y4er/CVE-2021-35215"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-09-01","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-35215","provenance":"source"},{"date":"2021-10-23","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/Y4er/CVE-2021-35215","provenance":"source"}],"speed":{"daysToPublicExploit":52,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":32.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.87,"detail":"percentile 0.9937"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":1.37,"detail":"3 pulses"},{"name":"CVSS severity","points":6.23,"detail":"base score 8.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}