Priority MEDIUM 46
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability.
CVSS 3.1CRITICAL 9.0· Adjacent network · Low privileges · No interaction · EPSS 0.03085 · Published 2024-09-12 · No fix listed CWE-502
Priority LOW 39
SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00474 · Published 2024-09-12 · No fix listed CWE-798
Priority MEDIUM 52
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.01344 · Published 2024-07-17 · No fix listed CWE-287
Priority MEDIUM 51
The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.0117 · Published 2024-07-17 · No fix listed CWE-287
Priority MEDIUM 62
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.10917 · Published 2024-07-17 · No fix listed CWE-502
Priority MEDIUM 54
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.02928 · Published 2024-07-17 · No fix listed CWE-22
Priority MEDIUM 54
SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.02539 · Published 2024-07-17 · No fix listed CWE-22
Priority MEDIUM 44
The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01943 · Published 2024-07-17 · No fix listed CWE-287
Priority HIGH 66
SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.17866 · Published 2024-07-17 · No fix listed CWE-20
Priority MEDIUM 47
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.02082 · Published 2024-07-17 · No fix listed CWE-22
Priority HIGH 67
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.18599 · Published 2024-07-17 · No fix listed CWE-22
Priority LOW 38
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.00955 · Published 2024-07-17 · No fix listed CWE-22
Priority MEDIUM 40
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.01893 · Published 2024-07-17 · No fix listed CWE-287
Priority MEDIUM 42
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
CVSS 3.1HIGH 8.3· Adjacent network · No auth · No interaction · EPSS 0.03379 · Published 2024-07-17 · No fix listed CWE-22
Priority MEDIUM 41
The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01515 · Published 2024-07-17 · No fix listed CWE-22
Priority MEDIUM 51
The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2024-05-09 · No fix listed CWE-798
Priority HIGH 80
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.0· Adjacent network · Low privileges · No interaction · EPSS 0.78028 · Published 2024-05-09 · No fix listed CWE-502
Priority MEDIUM 49
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.0· Adjacent network · Low privileges · No interaction · EPSS 0.04854 · Published 2024-02-15 · No fix listed CWE-502
Priority MEDIUM 53
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.07848 · Published 2024-02-15 · No fix listed CWE-22
Priority MEDIUM 53
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.0708 · Published 2024-02-15 · No fix listed CWE-22
Priority HIGH 77
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.81588 · Published 2024-02-15 · No fix listed CWE-502
Priority MEDIUM 52
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability.
CVSS 3.1CRITICAL 9.6· Adjacent network · No auth · No interaction · EPSS 0.05793 · Published 2024-02-15 · No fix listed CWE-22
Priority LOW 30
Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00799 · Published 2023-12-21 · No fix listed CWE-200
Priority LOW 35
The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00175 · Published 2023-10-19 · No fix listed CWE-276
Priority MEDIUM 49
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal Remote Code Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0329 · Published 2023-10-19 · No fix listed CWE-22
Load more