CVE-2023-35187

—

CVSS 3.1

9.8 critical

EPSS

3%p86

Published

Oct 19, 2023 (Oct 19, 2023)

Modified

Jun 17, 2026

Description

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

Vendors: solarwinds
Products: access rights manager
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news2 stories

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

The Hacker NewsNov 2, 12:20 UTC · Nov 2, 2023Exploit / PoC in the wildCVE-2023-34051 CVE-2023-4966 CVE-2023-35182+2 CVEs

SolarWinds fixed three critical RCE flaws in its Access Rights Manager product

Security AffairsOct 23, 11:52 UTC · Oct 23, 2023Vulnerability CVE-2023-35182 CVE-2023-35185 CVE-2023-35187