Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Access Rights Manager — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in Access Rights Manager, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the vendor's Access Rights Manager product, focusing on access control weaknesses and related security tags. It collects historical advisories concerning broken access control, insufficient authentication, and permission misconfigurations, covering the product's documented vulnerability history over the past five years. Readers can use this interface to track the vendor's published security notices, analyze patterns within specific weakness classes, and review the complete vulnerability timeline for this identity and access management component.

Vendor: SolarWinds

CVE ID Title CVSS Severity Published
CVE-2026-28326 SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability CWE-321 8.8 High 2026-09-17
CVE-2024-28991 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical 2024-09-12
CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability CWE-798 6.3 Medium 2024-09-12
CVE-2024-23471 SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability CWE-287 9.6 Critical 2024-07-17
CVE-2024-23470 SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability CWE-287 9.6 Critical 2024-07-17
CVE-2024-28074 SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability CWE-502 9.6 Critical 2024-07-17
CVE-2024-23467 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical 2024-07-17
CVE-2024-23466 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical 2024-07-17
CVE-2024-23465 SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability CWE-287 8.3 High 2024-07-17
CVE-2024-23469 SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability CWE-20 9.6 Critical 2024-07-17
CVE-2024-23475 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 9.6 Critical 2024-07-17
CVE-2024-23472 SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability CWE-22 9.6 Critical 2024-07-17
CVE-2024-28993 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 7.6 High 2024-07-17
CVE-2024-28992 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-287 7.6 High 2024-07-17
CVE-2024-23468 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 7.6 High 2024-07-17
CVE-2024-23474 SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability CWE-22 7.6 High 2024-07-17
CVE-2024-23473 SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability CWE-798 8.6 High 2024-05-09
CVE-2024-28075 SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical 2024-05-09
CVE-2023-40057 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical 2024-02-15
CVE-2024-23477 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 7.9 High 2024-02-15
CVE-2024-23476 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical 2024-02-15
CVE-2024-23478 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 8.0 High 2024-02-15
CVE-2024-23479 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical 2024-02-15
CVE-2023-40058 Sensitive Information Disclosure Vulnerability CWE-200 6.5 Medium 2023-12-21
CVE-2023-35181 SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability CWE-276 7.8 High 2023-10-19
CVE-2023-35187 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 8.8 High 2023-10-19
CVE-2023-35185 SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability CWE-22 6.8 Medium 2023-10-19
CVE-2023-35183 SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability CWE-276 7.8 High 2023-10-19
CVE-2023-35180 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.0 High 2023-10-19
CVE-2023-35182 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 High 2023-10-19

All 33 known CVE vulnerabilities affecting Access Rights Manager with full Chinese analysis, references, and POCs where available.