VULNERABILITY INTELLIGENCE

CVE-2021-35225

CVSS score6.4 MEDIUM

EPSS probability0.84%

CISA KEVNot currently listed

Published2021-10-21

Last modified2026-06-17

Description

Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.