AR
Product
Access Rights Manager
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 23Medium 2Low 0
Watch
Add Access Rights Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28326 | 8.8 | Sep 17 | SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability Affected: 2026.2 and all previous versions |
| CVE-2024-28990 | 8.8 | Sep 12 | SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability Affected: before 2024.3.1 |
| CVE-2024-28074 | 8.8 | Jul 17 | It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager Affected: through 2023.2.4 |
| CVE-2024-23475 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability Affected: through 2023.2.4 |
| CVE-2024-23474 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability Affected: through 2023.2.4 |
| CVE-2024-23471 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability Affected: through 2023.2.4 |
| CVE-2024-23470 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability Affected: through 2023.2.4 |
| CVE-2024-23469 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability Affected: through 2023.2.4 |
| CVE-2024-23467 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability Affected: through 2023.2.4 |
| CVE-2024-23466 | 8.8 | Jul 17 | SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability Affected: through 2023.2.4 |
| CVE-2024-23465 | 8.8 | Jul 17 | The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability Affected: through 2023.2.4 |
| CVE-2023-35186 | 8.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35180 | 8.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: through 2023.2.0.73 |
| CVE-2024-28993 | 8.3 | Jul 17 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability Affected: before 2024.3 |
| CVE-2024-28992 | 8.3 | Jul 17 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability Affected: through 2023.2.4 |
| CVE-2024-23468 | 8.3 | Jul 17 | The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability Affected: through 2023.2.4 |
| CVE-2024-28991 | 8.0 | Sep 12 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability Affected: before 2024.3.1 |
| CVE-2024-23472 | 8.0 | Jul 17 | SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability Affected: through 2023.2.4 |
| CVE-2024-28075 | 8.0 | May 14 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability Affected: before 2023.2.4 |
| CVE-2024-23478 | 8.0 | Feb 15 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability Affected: before 2023.2.3 |
| CVE-2023-35183 | 7.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability Affected: through 2023.2.0.73 |
| CVE-2023-35181 | 7.8 | Oct 19 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability Affected: through 2023.2.0.73 |
| CVE-2021-35227 | 7.8 | Oct 21 | The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available Affected: through 2020.2.6 |
Showing 23