NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2023-35187

CVSS 3.1: 9.8 critical
EPSS: 3%p86
Published: Oct 19, 2023 · Oct 19, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-35187 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

Vendors: solarwinds

Products: access rights manager

Weakness: CWE-22

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

2 stories

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

The Hacker NewsNov 2, 12:20 UTC · Nov 2, 2023Exploit / PoCExploitedCVE-2023-34051 CVE-2023-4966 CVE-2023-35182+22

60

SolarWinds fixed three critical RCE flaws in its Access Rights Manager product

Security AffairsOct 23, 11:52 UTC · Oct 23, 2023VulnerabilityCVE-2023-35182 CVE-2023-35185 CVE-2023-35187

60