CVE-2021-35227: SolarWinds Access Rights Manager

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.

Affected products

• SolarWinds Access Rights Manager: up to and including 2020.2.6

Published 2021-10-21. Last modified 2026-06-17.