CVE-2023-35185

—

CVSS 3.1

6.8 medium

EPSS

1%p65

Published

Oct 19, 2023 (Oct 19, 2023)

Modified

Jun 17, 2026

Description

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.

Vendors: solarwinds
Products: access rights manager
Weakness: CWE-22
Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news2 stories

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

The Hacker NewsNov 2, 12:20 UTC · Nov 2, 2023Exploit / PoC in the wildCVE-2023-34051 CVE-2023-4966 CVE-2023-35182+2 CVEs

60

SolarWinds fixed three critical RCE flaws in its Access Rights Manager product

Security AffairsOct 23, 11:52 UTC · Oct 23, 2023Vulnerability CVE-2023-35182 CVE-2023-35185 CVE-2023-35187

60