CVE-2023-35182

CRITICAL 9.8CVE-2023-35182 · Published 19/10/2023 · updated 17/06/2026

In short

CVE-2023-35182 is a CRITICAL (CVSS 9.8) vulnerability affecting access rights manager (solarwinds).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
access rights manager solarwinds	`≤ 2023.2.0.73`	No fix yet

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.

References

documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm · Release Notes
solarwinds.com/trust-center/security-advisories/CVE-2023-35182 · Vendor Advisory

More vulnerabilities in access rights manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

access rights manager

solarwinds

≤ 2023.2.0.73

No fix yet

More vulnerabilities in access rights manager

See all →