Vulnerabilities > Solarwinds > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-07-17 | CVE-2024-23474 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability. | 9.8 |
| 2024-07-17 | CVE-2024-23475 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. | 9.8 |
| 2024-07-17 | CVE-2024-28074 | Unspecified vulnerability in Solarwinds Access Rights Manager It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. | 9.8 |
| 2024-07-17 | CVE-2024-28992 | Path Traversal vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. | 9.4 |
| 2024-07-17 | CVE-2024-28993 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. | 9.4 |
| 2024-02-15 | CVE-2024-23477 | Path Traversal vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. | 9.6 |
| 2023-10-19 | CVE-2023-35182 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. | 9.8 |
| 2023-10-19 | CVE-2023-35184 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. | 9.8 |
| 2023-10-19 | CVE-2023-35187 | Unspecified vulnerability in Solarwinds Access Rights Manager The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability. | 9.8 |
| 2021-08-31 | CVE-2021-35222 | Cross-site Scripting vulnerability in Solarwinds Orion Platform This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page. | 9.6 |