SolarWinds

Records350All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical82CVSS 9.0–10.0

CVSS high139CVSS 7.0–8.9

Exploited now

SolarWinds records in CISA KEV

TI-2026-22619 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability CRITICAL 90KEV 2026-06-05 TI-2025-19358 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-03-09 TI-2025-27034 SolarWinds Web Help Desk Security Control Bypass Vulnerability CRITICAL 100KEV 2026-02-12 TI-2025-27044 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2026-02-03 TI-2024-19176 SolarWinds Web Help Desk Hardcoded Credential Vulnerability CRITICAL 98KEV 2024-10-15 TI-2024-19175 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2024-08-15

Components

Products in the NVD configurations · select one to filter the records

Serv-u 55 records CRITICAL Orion Platform 49 records CRITICAL Access Rights Manager 32 records HIGH Solarwinds Platform 27 records MEDIUM Web Help Desk 22 records CRITICAL Serv-u File Server 20 records HIGH Serv-u Ftp Server 11 records HIGH Database Performance Analyzer 10 records MEDIUM

Records

32 records in Access Rights Manager · all components

TI-2024-18663 CVE-2024-28075 · GHSA-8ppj-8m99-39pw

SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution

HIGH 80

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.78028 Published 2024-05-09 No fix listed CWE-502

TI-2024-15524 CVE-2024-23478 · GHSA-v49w-8x46-rgr6

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

HIGH 77

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.81588 Published 2024-02-15 No fix listed CWE-502

TI-2024-15518 CVE-2024-23472 · GHSA-9g4r-89hx-hv6j

SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

HIGH 67

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.18599 Published 2024-07-17 No fix listed CWE-22

TI-2024-15515 CVE-2024-23469 · GHSA-8pgq-57fj-h74q

SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability

HIGH 66

SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.17866 Published 2024-07-17 No fix listed CWE-20

TI-2023-17625 CVE-2023-35180 · GHSA-hqmv-5rff-cqrx

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

MEDIUM 63

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.28808 Published 2023-10-19 No fix listed CWE-502

TI-2024-18662 CVE-2024-28074 · GHSA-7r67-crqq-3693

SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability

MEDIUM 62

It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.10917 Published 2024-07-17 No fix listed CWE-502

TI-2024-15513 CVE-2024-23467 · GHSA-h654-r868-pj2q

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

MEDIUM 54

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.02928 Published 2024-07-17 No fix listed CWE-22

TI-2024-15512 CVE-2024-23466 · GHSA-gcc2-5vx5-63jr

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

MEDIUM 54

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.02539 Published 2024-07-17 No fix listed CWE-22

TI-2024-15523 CVE-2024-23477 · GHSA-4v5r-p2wq-3j8j

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

MEDIUM 53

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.07848 Published 2024-02-15 No fix listed CWE-22

TI-2024-15522 CVE-2024-23476 · GHSA-6928-mq33-x3pc

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

MEDIUM 53

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0708 Published 2024-02-15 No fix listed CWE-22

TI-2024-15525 CVE-2024-23479 · GHSA-pp3f-x96v-fpcf

SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

MEDIUM 52

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.05793 Published 2024-02-15 No fix listed CWE-22

TI-2024-15517 CVE-2024-23471 · GHSA-4ww9-x3qp-vcwc

SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability

MEDIUM 52

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.01344 Published 2024-07-17 No fix listed CWE-287

TI-2024-15519 CVE-2024-23473 · GHSA-48vf-pq83-g67j

SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability

MEDIUM 51

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2024-05-09 No fix listed CWE-798

TI-2024-15516 CVE-2024-23470 · GHSA-jvf5-642m-hpc3

SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability

MEDIUM 51

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.0117 Published 2024-07-17 No fix listed CWE-287

TI-2023-20947 CVE-2023-40057 · GHSA-7fc3-82cp-v5p4

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

MEDIUM 49

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.04854 Published 2024-02-15 No fix listed CWE-502

TI-2023-17632 CVE-2023-35187 · GHSA-6436-gq3f-g99g

SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability

MEDIUM 49

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0329 Published 2023-10-19 No fix listed CWE-22

TI-2023-17627 CVE-2023-35182 · GHSA-xpvx-v3vc-27gc

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

MEDIUM 48

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02634 Published 2023-10-19 No fix listed CWE-502

TI-2024-15521 CVE-2024-23475 · GHSA-99mg-hh47-f9qh

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

MEDIUM 47

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.02082 Published 2024-07-17 No fix listed CWE-22

TI-2024-19180 CVE-2024-28991 · GHSA-j4w6-9wmj-vfmv

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

MEDIUM 46

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability.

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.03085 Published 2024-09-12 No fix listed CWE-502

TI-2023-17629 CVE-2023-35184 · GHSA-3qmw-7623-hwxf

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

MEDIUM 46

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01661 Published 2023-10-19 No fix listed CWE-502

TI-2023-17631 CVE-2023-35186 · GHSA-v7qj-g6j7-8wq9

SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

MEDIUM 45

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02562 Published 2023-10-19 No fix listed CWE-502

TI-2024-15511 CVE-2024-23465 · GHSA-86xc-mwv4-f994

SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability

MEDIUM 44

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01943 Published 2024-07-17 No fix listed CWE-287

TI-2024-15514 CVE-2024-23468 · GHSA-4w6x-hxgr-c3q5

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

MEDIUM 42

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.03379 Published 2024-07-17 No fix listed CWE-22

TI-2024-15520 CVE-2024-23474 · GHSA-2wg4-c3jx-83f5

Path traversal in SolarWinds Access Rights Manager

MEDIUM 41

The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01515 Published 2024-07-17 No fix listed CWE-22

TI-2024-19181 CVE-2024-28992 · GHSA-2x53-jv7f-c2x5

SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability

MEDIUM 40

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.01893 Published 2024-07-17 No fix listed CWE-287

Open these records in search →

Critical	82
High	139
Medium	127
Low	2
No CVSS	0