CVE-2023-35187: SolarWinds Access Rights Manager

Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days.

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

Affected products

• SolarWinds Access Rights Manager: up to and including 2023.2.0.73

Published 2023-10-19. Last modified 2026-06-17.