CVE-2023-35184: SolarWinds Access Rights Manager

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution.

Affected products

  • SolarWinds Access Rights Manager: up to and including 2023.2.0.73

Published 2023-10-19. Last modified 2026-06-17.