vulnerability

SolarWinds Access Rights Manager: CVE-2023-35182: Deserialization of Untrusted Data Remote Code Execution Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:A/AC:L/Au:N/C:C/I:C/A:C)	Oct 18, 2023	Apr 9, 2025	Jul 2, 2025

Severity

CVSS

(AV:A/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 18, 2023

Added

Apr 9, 2025

Modified

Jul 2, 2025

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.

Solution

solarwinds-access-rights-manager-upgrade-latest

References

CWE-502
CVE-2023-35182
https://attackerkb.com/topics/CVE-2023-35182
URL-https://www.solarwinds.com/trust-center/security-advisories/cve-2023-35182

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today