AR
Product
Access Rights Manager
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 23Medium 2Low 0
Watch
Add Access Rights Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23473 | 9.8 | May 9 | SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability Affected: previous versions through 2023.2.3 |
| CVE-2023-35187 | 9.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35184 | 9.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35182 | 9.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2024-23479 | 9.6 | Feb 15 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability Affected: before 2023.2.3 |
| CVE-2024-23477 | 9.6 | Feb 15 | The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability Affected: before 2023.2.3 |
| CVE-2024-23476 | 9.6 | Feb 15 | The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability Affected: before 2023.2.3 |
| CVE-2023-40057 | 9.0 | Feb 15 | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability Affected: before 2023.2.2 |
| CVE-2026-28326 | 8.8 | Sep 17 | SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability Affected: 2026.2 and all previous versions |
| CVE-2024-28990 | 8.8 | Sep 12 | SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability Affected: previous versions through 2024.3 |
| CVE-2024-23471 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23470 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-28074 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23467 | 8.8 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23466 | 8.8 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23465 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23469 | 8.8 | Jul 17 | SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23475 | 8.8 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23474 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2023-35186 | 8.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35180 | 8.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2024-28993 | 8.3 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-28992 | 8.3 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-23468 | 8.3 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-28991 | 8.0 | Sep 12 | SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution Affected: previous versions through 2024.3 |
| CVE-2024-23472 | 8.0 | Jul 17 | SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability Affected: previous versions through 2023.2.4 |
| CVE-2024-28075 | 8.0 | May 9 | SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution Affected: previous versions through 2023.2.3 |
| CVE-2024-23478 | 8.0 | Feb 15 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability Affected: before 2023.2.3 |
| CVE-2023-35183 | 7.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35181 | 7.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability Affected: through 2023.2.0.73 |
| CVE-2021-35227 | 7.8 | Oct 21 | The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available Affected: through 2020.2.6 |
| CVE-2023-35185 | 6.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability using SYSTEM privileges Affected: through 2023.2.0.73 |
| CVE-2023-40058 | 6.5 | Dec 21 | Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the… Affected: through 2023.2.1 |
Showing 33