Solarwinds Access Rights Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Solarwinds Access Rights Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (32)

• CVE-2024-23472 — CVSS 9.6 (critical): SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user…
• CVE-2024-23476 — CVSS 9.6 (critical): The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If…
• CVE-2024-23479 — CVSS 9.6 (critical): SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If…
• CVE-2024-23466 — CVSS 9.6 (critical): SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this…
• CVE-2024-23467 — CVSS 9.6 (critical): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability…
• CVE-2024-28074 — CVSS 9.6 (critical): It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were…
• CVE-2024-23469 — CVSS 9.6 (critical): SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an…
• CVE-2024-23470 — CVSS 9.6 (critical): The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited…
• CVE-2024-23471 — CVSS 9.6 (critical): The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability…
• CVE-2024-23475 — CVSS 9.6 (critical): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability…
• CVE-2024-28075 — CVSS 9.0 (critical): The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated…
• CVE-2023-40057 — CVSS 9.0 (critical): The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability…
• CVE-2024-28991 — CVSS 9.0 (critical): SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this…
• CVE-2023-35187 — CVSS 8.8 (high): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability allows an…
• CVE-2023-35182 — CVSS 8.8 (high): The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by…
• CVE-2023-35184 — CVSS 8.8 (high): The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated…
• CVE-2024-23473 — CVSS 8.6 (high): The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this…
• CVE-2024-23465 — CVSS 8.3 (high): The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an…
• CVE-2024-23478 — CVSS 8.0 (high): SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this…
• CVE-2023-35186 — CVSS 8.0 (high): The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated…
• CVE-2023-35180 — CVSS 8.0 (high): The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows authenticated users…
• CVE-2024-23477 — CVSS 7.9 (high): The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If…
• CVE-2023-35181 — CVSS 7.8 (high): The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows users to abuse…
• CVE-2023-35183 — CVSS 7.8 (high): The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows authenticated users…
• CVE-2024-28993 — CVSS 7.6 (high): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability…
• CVE-2024-23468 — CVSS 7.6 (high): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability…
• CVE-2024-23474 — CVSS 7.6 (high): The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.
• CVE-2024-28992 — CVSS 7.6 (high): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability…
• CVE-2023-35185 — CVSS 6.8 (medium): The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges.
• CVE-2023-40058 — CVSS 6.5 (medium): Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager…
• CVE-2024-28990 — CVSS 6.3 (medium): SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this…
• CVE-2021-35227 — CVSS 4.7 (medium): The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.