Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2997▼ 66 respecto a la semana anterior

Críticas / altas1460▲ 109 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)339▼ 171 respecto a la semana anterior

33 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-35186	Modificada	Alta (8.8)	2.2%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.
CVE-2023-35185	Analizada	Media (6.8)	1.1%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.
CVE-2023-35184	Modificada	Crítica (9.8)	1.4%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse a SolarWinds service resulting in a remote code execution.
CVE-2023-35183	Modificada	Alta (7.8)	0.20%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users to abuse local resources to Privilege Escalation.
CVE-2023-35182	Modificada	Crítica (9.8)	2.4%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.
CVE-2023-35181	Modificada	Alta (7.8)	0.18%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows users to abuse incorrect folder permission resulting in Privilege Escalation.
CVE-2023-35180	Modificada	Alta (8.8)	27%	—	Solarwinds Access Rights Manager	19/10/2023	17/6/2026	The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users to abuse SolarWinds ARM API.
CVE-2021-35227	Modificada	Alta (7.8)	0.48%	—	Solarwinds Access Rights Manager	21/10/2021	17/6/2026	The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.