Browse CVEs

HIGH 8.8 CVE-2024-23467 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an … Access Rights Manager after 2023.2.4 Fix from $1,9502024-07-17 HIGH 8.8 CVE-2024-23469EPSS 18% SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenti… Access Rights Manager after 2023.2.4 Fix from $1,9502024-07-17 HIGH 8.3 CVE-2024-23468 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an … Access Rights Manager after 2023.2.4 Fix from $1,9502024-07-17 HIGH 8.8 CVE-2024-23465 The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthentica… Access Rights Manager after 2023.2.4 Fix from $1,9502024-07-17 HIGH 7.5 CVE-2024-28995 KEVEPSS 100% SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. Serv U 15.4.2+ Fix from $1,9502024-06-06 HIGH 7.5 CVE-2024-28999EPSS 14% The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. Solarwinds Platform 2024.2+ Fix from $1,9502024-06-04 HIGH 7.5 CVE-2024-28996 The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.   Solarwinds Platform 2024.2+ Fix from $1,9502024-06-04 HIGH 8.0 CVE-2024-28075EPSS 78% The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse… Access Rights Manager 2023.2.4+ Fix from $1,9502024-05-14 CRITICAL 9.8 CVE-2024-23473 The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerabili… Access Rights Manager 2023.2.4+ Fix from $2,3002024-05-14 HIGH 7.4 CVE-2024-29001 A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interact… Solarwinds Platform 2024.1.1+ Fix from $1,9502024-04-18 HIGH 7.2 CVE-2024-28073 SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged acc… Serv U 15.4.2+ Fix from $1,9502024-04-17 HIGH 8.8 CVE-2024-0692EPSS 92% The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to ab… Security Event Manager 2023.4.1+ Fix from $1,9502024-03-01 CRITICAL 9.6 CVE-2024-23479EPSS 6% SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this v… Access Rights Manager 2023.2.3+ Fix from $2,3002024-02-15 CRITICAL 9.6 CVE-2024-23476EPSS 7% The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, th… Access Rights Manager 2023.2.3+ Fix from $2,3002024-02-15 CRITICAL 9.6 CVE-2024-23477EPSS 8% The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, th… Access Rights Manager 2023.2.3+ Fix from $2,3002024-02-15 HIGH 8.0 CVE-2024-23478EPSS 82% SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows … Access Rights Manager 2023.2.3+ Fix from $1,9502024-02-15 CRITICAL 9.0 CVE-2023-40057 The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an… Access Rights Manager 2023.2.2+ Fix from $2,3002024-02-15 HIGH 8.0 CVE-2023-35188 SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user aut… Solarwinds Platform 2024.1+ Fix from $1,9502024-02-06 HIGH 8.0 CVE-2023-50395 SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user au… Solarwinds Platform 2024.1+ Fix from $1,9502024-02-06 MEDIUM 6.5 CVE-2023-40058 Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if … Access Rights Manager after 2023.2.1 Fix from $1,6002023-12-21 MEDIUM 5.0 CVE-2023-40053 A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Ser… Serv U Mitigation only Fix from $1,6002023-12-06 HIGH 8.8 CVE-2023-40056 SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account. Solarwinds Platform 2023.4.2+ Fix from $1,9502023-11-28 HIGH 8.8 CVE-2023-40055 The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-leve… Network Configuration Manager after 2023.4 Fix from $1,9502023-11-09 HIGH 8.8 CVE-2023-40054 The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-leve… Network Configuration Manager after 2023.4 Fix from $1,9502023-11-09 HIGH 8.8 CVE-2023-33226 The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-leve… Network Configuration Manager 2023.4+ Fix from $1,9502023-11-01 HIGH 8.8 CVE-2023-33227 The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level … Network Configuration Manager 2023.4+ Fix from $1,9502023-11-01 HIGH 8.8 CVE-2023-40061  Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result. Solarwinds Platform 2023.4+ Fix from $1,9502023-11-01 HIGH 8.8 CVE-2023-40062 SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privi… Solarwinds Platform 2023.4+ Fix from $1,9502023-11-01 CRITICAL 9.8 CVE-2023-35182 The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated user… Access Rights Manager after 2023.2.0.73 Fix from $2,3002023-10-19 CRITICAL 9.8 CVE-2023-35184 The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abu… Access Rights Manager after 2023.2.0.73 Fix from $2,3002023-10-19