Solarwinds

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-28987 1Solarwinds 1Web Help Desk Oct 27, 2025 Aug 21, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
CVE-2024-28986 1Solarwinds 1Web Help Desk Oct 27, 2025 Aug 13, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported...Show more SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.Show less
CVE-2024-28993 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensit...Show more The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.Show less
CVE-2024-28992 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensit...Show more The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.Show less
CVE-2024-28074 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to e...Show more It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a different method to exploit the vulnerability.Show less
CVE-2024-23475 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensit...Show more The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.Show less
CVE-2024-23474 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.
CVE-2024-23472 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
CVE-2024-23471 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote c...Show more The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution. Show less
CVE-2024-23470 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executable...Show more The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables. Show less
CVE-2024-23469 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.
CVE-2024-23468 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.3 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensit...Show more The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.Show less
CVE-2024-23467 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code execution.
CVE-2024-23466 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privi...Show more SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges. Show less
CVE-2024-23465 1Solarwinds 1Access Rights Manager Feb 26, 2025 Jul 17, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory enviro...Show more The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment. Show less
CVE-2024-28995 1Solarwinds 1Serv U Feb 26, 2026 Jun 6, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
CVE-2024-29004 1Solarwinds 1Solarwinds Platform Feb 26, 2025 Jun 4, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The SolarWinds Platform was determined to be affected by a stored cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.
CVE-2024-28999 1Solarwinds 1Solarwinds Platform Feb 26, 2025 Jun 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console.
CVE-2024-28996 1Solarwinds 1Solarwinds Platform Feb 26, 2025 Jun 4, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for this vulnerability.
CVE-2024-29000 1Solarwinds 1Solarwinds Platform Feb 26, 2025 May 20, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The SolarWinds Platform was determined to be affected by a reflected cross-site scripting vulnerability affecting the web console. A high-privileged user and user interaction is required to exploit this vulnerability.

Previous 1 234 5...16 Next