cvedb.io
CVE-2021-35226
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2022-10-10T23:15:14.193 · Last modified 2026-06-17T03:57:20.287

Summary

An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

Affected products

solarwinds — network_configuration_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when solarwinds ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.