SolarWinds Platform (Orion)
CVE-2021-35217: Insecure Deserialization of untrusted data causing Remote code execution vulnerability.
Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Orion Platform 2020.2 | 2020.2.6 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.