CVE-2021-35251: Sensitive Data Disclosure Vulnerability

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-10 · updated 2026-06-17
Weakness: CWE-209

Description

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation.

Affected products

SolarWinds Web Help Desk: before 12.7.8 — fixed in 12.7.8

How to fix

Upgrade to a fixed version: SolarWinds Web Help Desk 12.7.8. Check the vendor advisory for mitigations.

References

https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-7-8_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35251
https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-7-8_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35251

Get alerted when CVE-2021-35251 or the next vulnerability affects your stack