vulnerability
SolarWinds Access Rights Manager: CVE-2023-35180: Deserialization of Untrusted Data Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:A/AC:L/Au:S/C:C/I:C/A:C) | Oct 18, 2023 | Apr 9, 2025 | Jul 2, 2025 |
Severity
8
CVSS
(AV:A/AC:L/Au:S/C:C/I:C/A:C)
Published
Oct 18, 2023
Added
Apr 9, 2025
Modified
Jul 2, 2025
Description
The SolarWinds Access Rights Manager was susceptible to RemoteCode Execution Vulnerability. This vulnerability allows authenticatedusers to abuse SolarWinds ARM API.
Solution
solarwinds-access-rights-manager-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.