Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 347

Export CSV
CVE-2023-23838

Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) 2023.1

Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Microsoft Solarwinds
Products
Windows Database Performance Analyzer
CVE-2023-23839

SolarWinds Platform Exposure of Sensitive Information Vulnerability

The SolarWinds Platform was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users to access Orion.WebCommunityStrings SWIS schema object and obtain sensitive information.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2024-29004

SolarWinds Platform Stored XSS Vulnerability

The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2024-28999

SolarWinds Platform Race Condition Vulnerability

The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.

CVSS 3.1 · 6.4 Medium EPSS 13.9% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2024-28996

SolarWinds Platform SWQL Injection Vulnerability

The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.  

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2024-28993

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-28992

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS 1.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23479

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

CVSS 3.1 · 9.6 Critical EPSS 5.8% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23478

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.

CVSS 3.1 · 8 High EPSS 81.6% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23477

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

CVSS 3.1 · 7.9 High EPSS 7.8% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23476

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

CVSS 3.1 · 9.6 Critical EPSS 7.1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23475

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 9.6 Critical EPSS 2.1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23474

SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.

CVSS 3.1 · 7.6 High EPSS 1.5% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23470

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

CVSS 3.1 · 9.6 Critical EPSS 1.2% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23468

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS 3.4% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23465

SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.  

CVSS 3.1 · 8.3 High EPSS 1.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2023-40062

Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.

CVSS 3.1 · 8 High EPSS 3.6% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-40061

Insecure Job Execution Mechanism Vulnerability

 Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Solarwinds Platform
CVE-2023-40058

Sensitive Information Disclosure Vulnerability

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager