NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-35185

CVSS 3.1: 6.8 medium
EPSS: 1%p65
Published: Oct 19, 2023 · Oct 19, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-35185 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.

Vendors: solarwinds

Products: access rights manager

Weakness: CWE-22

Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

2 stories

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

The Hacker NewsNov 2, 12:20 UTC · Nov 2, 2023Exploit / PoCExploitedCVE-2023-34051 CVE-2023-4966 CVE-2023-35182+22

60

SolarWinds fixed three critical RCE flaws in its Access Rights Manager product

Security AffairsOct 23, 11:52 UTC · Oct 23, 2023VulnerabilityCVE-2023-35182 CVE-2023-35185 CVE-2023-35187

60