CVE-2023-35180

Severity

HIGH

CVSS

8.0

EPSS

0.27367

Risk score

41.58

CISA KEV

PoC

Published

2023-10-19

Modified

2024-09-12

First seen

2026-08-07

Aliases

EUVD-2023-39183, GHSA-HQMV-5RFF-CQRX

Products

SolarWinds:Access Rights Manager previous versions ≤2023.2.0.73

Sources

euvd EUVD-2023-39183

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39183
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-35180
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm