VULNERABILITY INTELLIGENCE

CVE-2021-35248

CVSS score6.8 MEDIUM

EPSS probability0.92%

CISA KEVNot currently listed

Published2021-12-20

Last modified2026-06-17

Description

It has been reported that any Orion user, e.g. guest accounts can query the Orion.UserSettings entity and enumerate users and their basic settings.