Export limit exceeded: 26160 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 33

Export CSV
CVE-2024-23471

SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

CVSS 3.1 · 9.6 Critical EPSS 1.3% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23467

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.

CVSS 3.1 · 9.6 Critical EPSS 2.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-28074

SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability

It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.

CVSS 3.1 · 9.6 Critical EPSS 10.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23472

SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

CVSS 3.1 · 9.6 Critical EPSS 18.6% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23469

SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability

SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

CVSS 3.1 · 9.6 Critical EPSS 17.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23466

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.

CVSS 3.1 · 9.6 Critical EPSS 2.5% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2026-28326

SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-28075

SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

CVSS 3.1 · 9 Critical EPSS 78.0% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23473

SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

CVSS 3.1 · 8.6 High EPSS 1.1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-28993

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-28992

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS 1.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23479

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

CVSS 3.1 · 9.6 Critical EPSS 5.8% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23478

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.

CVSS 3.1 · 8 High EPSS 81.6% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23477

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

CVSS 3.1 · 7.9 High EPSS 7.8% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23476

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

CVSS 3.1 · 9.6 Critical EPSS 7.1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23475

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 9.6 Critical EPSS 2.1% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23474

SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.

CVSS 3.1 · 7.6 High EPSS 1.5% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23470

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

CVSS 3.1 · 9.6 Critical EPSS 1.2% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23468

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

CVSS 3.1 · 7.6 High EPSS 3.4% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager
CVE-2024-23465

SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.  

CVSS 3.1 · 8.3 High EPSS 1.9% KEV · Not listed
Vendors
Solarwinds
Products
Access Rights Manager