solarwinds Vulnerability Advisory Catalog

Total 334 security vulnerabilities recorded for solarwinds software and firmware.

← Back to All Vendors
Component: web_help_desk

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and confi...

๐Ÿ“… 2024-12-10
CVSS 5.3 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was susceptible to a XSS vulnerability that affects the search and node information section of the user interface. This vulner...

๐Ÿ“… 2024-12-04
CVSS 7.0 Dossier →
Component: kiwi_cattools

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting p...

๐Ÿ“… 2024-10-17
CVSS 5.1 Dossier →
Component: solarwinds_platform

The SolarWinds Platform was susceptible to a Cross-Site Scripting vulnerability when performing an edit function to existing elements....

๐Ÿ“… 2024-10-16
CVSS 7.1 Dossier →
Component: serv-u

Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with usersโ€™ permissions can modify a variable with a payload....

๐Ÿ“… 2024-10-16
CVSS 4.8 Dossier →
Component: serv-u

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the ...

๐Ÿ“… 2024-10-16
CVSS 7.5 Dossier →
Component: solarwinds_platform

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege acco...

๐Ÿ“… 2024-10-16
CVSS 7.8 Dossier →
CVE-2024-28991 CRITICAL
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would al...

๐Ÿ“… 2024-09-12
CVSS 9.0 Dossier →
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerabil...

๐Ÿ“… 2024-09-12
CVSS 6.3 Dossier →
CVE-2024-28987 CRITICAL
Component: web_help_desk

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access intern...

๐Ÿ“… 2024-08-21
CVSS 9.1 Dossier →
CVE-2024-28986 CRITICAL
Component: web_help_desk

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an ...

๐Ÿ“… 2024-08-13
CVSS 9.8 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an u...

๐Ÿ“… 2024-07-17
CVSS 7.6 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an u...

๐Ÿ“… 2024-07-17
CVSS 7.6 Dossier →
CVE-2024-28074 CRITICAL
Component: access_rights_manager

It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented t...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
CVE-2024-23475 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an u...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability....

๐Ÿ“… 2024-07-17
CVSS 7.6 Dossier →
CVE-2024-23472 CRITICAL
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitra...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
CVE-2024-23471 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an ...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
CVE-2024-23470 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulne...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
CVE-2024-23469 CRITICAL
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthentic...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an u...

๐Ÿ“… 2024-07-17
CVSS 7.6 Dossier →
CVE-2024-23467 CRITICAL
Component: access_rights_manager

The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an u...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
CVE-2024-23466 CRITICAL
Component: access_rights_manager

SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability a...

๐Ÿ“… 2024-07-17
CVSS 9.6 Dossier →
Component: access_rights_manager

The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticat...

๐Ÿ“… 2024-07-17
CVSS 8.3 Dossier →
Page 3 of 14 (334 Total Records)