vulnerability
SolarWinds Access Rights Manager: CVE-2023-35184: Deserialization of Untrusted Data Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:A/AC:L/Au:N/C:C/I:C/A:C) | Oct 18, 2023 | Apr 9, 2025 | Jul 2, 2025 |
Severity
8
CVSS
(AV:A/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 18, 2023
Added
Apr 9, 2025
Modified
Jul 2, 2025
Description
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution.
Solution
solarwinds-access-rights-manager-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.