Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Access Rights Manager — Vulnerabilities & Security Advisories 32

All 32 CVE vulnerabilities found in Access Rights Manager, with AI-generated Chinese analysis, references, and POCs.

This page covers vulnerability aggregation data for Access Rights Manager, focusing on common weakness classifications tracked within enterprise software environments. The database collects security advisories, disclosed CVE records, and vendor-published notices related to authentication bypass, privilege escalation, and authorization flaws affecting this specific product line. The covered time range spans from the initial release of the software up to the most recent public disclosures, ensuring a comprehensive historical view of the product's security posture over its lifecycle. Users can leverage this resource to track a vendor's advisories as they are released, allowing for timely patching and risk mitigation decisions. Additionally, the page helps users understand a weakness class by contextualizing specific flaws within the broader landscape of access control vulnerabilities, highlighting patterns in how similar issues have manifested in past versions. It also enables interested parties to look up a product's vulnerability history, providing a chronological timeline of security incidents that occurred between various software updates. This aggregated view supports security teams in assessing long-term stability and reliability, facilitating better decision-making regarding upgrades, legacy system retention, or migration strategies. By centralizing this information, the page aims to reduce the administrative burden of manually scouring multiple sources, offering a single point of reference for understanding the security evolution of Access Rights Manager and its associated components.

Vendor: SolarWinds

CVE IDTitleCVSSSeverityPublished
CVE-2024-28991 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical2024-09-12
CVE-2024-28990 SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability CWE-798 6.3 Medium2024-09-12
CVE-2024-23471 SolarWinds Access Rights Manager (ARM) CreateFile Directory Traversal Remote Code Execution Vulnerability CWE-287 9.6 Critical2024-07-17
CVE-2024-23470 SolarWinds Access Rights Manager (ARM) UserScriptHumster Exposed Dangerous Method Remote Command Execution Vulnerability CWE-287 9.6 Critical2024-07-17
CVE-2024-28074 SolarWinds Access Rights Manager (ARM) Internal Deserialization Remote Code Execution Vulnerability CWE-502 9.6 Critical2024-07-17
CVE-2024-23467 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical2024-07-17
CVE-2024-23466 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical2024-07-17
CVE-2024-23465 SolarWinds Access Rights Manager (ARM) ChangeHumster Exposed Dangerous Method Authentication Bypass Vulnerability CWE-287 8.3 High2024-07-17
CVE-2024-23469 SolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability CWE-20 9.6 Critical2024-07-17
CVE-2024-23475 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 9.6 Critical2024-07-17
CVE-2024-23472 SolarWinds Access Rights Manager Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability CWE-22 9.6 Critical2024-07-17
CVE-2024-28993 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 7.6 High2024-07-17
CVE-2024-28992 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-287 7.6 High2024-07-17
CVE-2024-23468 SolarWinds Access Rights Manager Directory Traversal and Information Disclosure Vulnerability CWE-22 7.6 High2024-07-17
CVE-2024-23474 SolarWinds Access Rights Manager (ARM) deleteTransferFile Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability CWE-22 7.6 High2024-07-17
CVE-2024-23473 SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability CWE-798 8.6 High2024-05-09
CVE-2024-28075 SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical2024-05-09
CVE-2023-40057 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 9.0 Critical2024-02-15
CVE-2024-23477 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 7.9 High2024-02-15
CVE-2024-23476 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical2024-02-15
CVE-2024-23478 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution CWE-502 8.0 High2024-02-15
CVE-2024-23479 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability CWE-22 9.6 Critical2024-02-15
CVE-2023-40058 Sensitive Information Disclosure Vulnerability CWE-200 6.5 Medium2023-12-21
CVE-2023-35181 SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability CWE-276 7.8 High2023-10-19
CVE-2023-35187 SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability CWE-22 8.8 High2023-10-19
CVE-2023-35185 SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability CWE-22 6.8 Medium2023-10-19
CVE-2023-35183 SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability CWE-276 7.8 High2023-10-19
CVE-2023-35180 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.0 High2023-10-19
CVE-2023-35182 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 High2023-10-19
CVE-2023-35184 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability CWE-502 8.8 High2023-10-19

All 32 known CVE vulnerabilities affecting Access Rights Manager with full Chinese analysis, references, and POCs where available.