CVE-2023-40058: SolarWinds Access Rights Manager

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.

Affected products

• SolarWinds Access Rights Manager: up to and including 2023.2.1

Published 2023-12-21. Last modified 2026-06-17.