Advisories · Technology

SolarWinds Access Rights Manager.

Every CVE that names SolarWinds Access Rights Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28326 CVE record

CVSS 8.8 High

SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Hard-coded credentials
Not analysed yet 17 Sept 2026
CVE-2024-28991 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 12 Sept 2024
CVE-2024-28990 CVE record

CVSS 6.3 Medium

SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability
- SolarWinds Access Rights Manager
- Hard-coded credentials
Not analysed yet 12 Sept 2024
CVE-2024-23471 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Authentication bypass
Not analysed yet 17 Jul 2024
CVE-2024-23470 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability
- SolarWinds Access Rights Manager
- Authentication bypass
Not analysed yet 17 Jul 2024
CVE-2024-28074 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 17 Jul 2024
CVE-2024-23467 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-23466 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-23465 CVE record

CVSS 8.3 High

SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability
- SolarWinds Access Rights Manager
- Authentication bypass
Not analysed yet 17 Jul 2024
CVE-2024-23469 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- CWE-20
Not analysed yet 17 Jul 2024
CVE-2024-23475 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-23472 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-28993 CVE record

CVSS 7.6 High

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-28992 CVE record

CVSS 7.6 High

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Authentication bypass
Not analysed yet 17 Jul 2024
CVE-2024-23468 CVE record

CVSS 7.6 High

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-23474 CVE record

CVSS 7.6 High

SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 17 Jul 2024
CVE-2024-23473 CVE record

CVSS 8.6 High

SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability
- SolarWinds Access Rights Manager
- Hard-coded credentials
Not analysed yet 9 May 2024
CVE-2024-28075 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 9 May 2024
CVE-2023-40057 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 15 Feb 2024
CVE-2024-23477 CVE record

CVSS 7.9 High

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 15 Feb 2024
CVE-2024-23476 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 15 Feb 2024
CVE-2024-23478 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 15 Feb 2024
CVE-2024-23479 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 15 Feb 2024
CVE-2023-40058 CVE record

CVSS 6.5 Medium

Sensitive Information Disclosure Vulnerability
- SolarWinds Access Rights Manager
- Information disclosure
Not analysed yet 21 Dec 2023
CVE-2023-35181 CVE record

CVSS 7.8 High

SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
- SolarWinds Access Rights Manager
- Broken access control
Not analysed yet 19 Oct 2023
CVE-2023-35187 CVE record

CVSS 8.8 High

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 19 Oct 2023
CVE-2023-35185 CVE record

CVSS 6.8 Medium

SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Path traversal
Not analysed yet 19 Oct 2023
CVE-2023-35183 CVE record

CVSS 7.8 High

SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability
- SolarWinds Access Rights Manager
- Broken access control
Not analysed yet 19 Oct 2023
CVE-2023-35180 CVE record

CVSS 8.0 HighCritical · CVSS 7+ and EPSS

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 19 Oct 2023
CVE-2023-35182 CVE record

CVSS 8.8 High

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 19 Oct 2023
CVE-2023-35184 CVE record

CVSS 8.8 High

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 19 Oct 2023
CVE-2023-35186 CVE record

CVSS 8.0 High

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
- SolarWinds Access Rights Manager
- Insecure deserialization
Not analysed yet 19 Oct 2023
CVE-2021-35227 CVE record

CVSS 4.7 Medium

Insecure Web Configuration for RabbitMQ Management Plugin in SolarWinds ARM
- SolarWinds Access Rights Manager
- Cross-site scripting (XSS)
Not analysed yet 21 Oct 2021