CVE-2024-23479 SolarWinds Access Rights Manager (ARM) Directory Traversal Remote Code Execution Vulnerability

SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

CVE-2023-40057: Deserialization of Untrusted Data

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution...

CVE-2024-23477: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

CVE-2024-23476: Improper Limitation of a Pathname to a Restricted Directory

The SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution...

CVE-2024-23478: Deserialization of Untrusted Data

SolarWinds Access Rights Manager ARM was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution...

CVE-2024-23479: Improper Limitation of a Pathname to a Restricted Directory

SolarWinds Access Rights Manager ARM was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution...

SolarWinds Access Rights Manager 代码问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. SolarWinds Access Rights Manager suffers from a deserialization vulnerability that can be exploited by an attacker to remotely execute code...

SolarWinds Orion Platform AppendCreatePrimary SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the AppendCreatePrimary method. The issue results from the lack of proper validati...

PT-2024-1750 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager ARM is susceptible to a Directory Traversal Remote Code Execution issue. If exploited, this issue allows an unauthenticated use...

SolarWinds Orion Platform AppendUpdate SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the AppendUpdate method. The issue results from the lack of proper validation of a...

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to remotely execute code...

SolarWinds Access Rights Manager 路径遍历漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A path traversal vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to remotely execute code...

SolarWinds Access Rights Manager 代码问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. SolarWinds Access Rights Manager suffers from a deserialization vulnerability that can be exploited by an attacker to remotely execute code...

SolarWinds Platform 2023.4.0 < 2024.1 Multiple Vulnerabilities SQLI

The version of SolarWinds Platform installed on the remote host is prior to 2024.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20241 advisory. - SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWind...

SolarWinds Platform < 2023.4 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.4. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20234 advisory. - The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution...

Vulnerabilities fixed in SolarWinds Platform

SolarWinds has fixed vulnerabilities in SolarWinds Platform. An authenticated malicious party can exploit the vulnerabilities to gain access to sensitive data via SQL injection, or execute code that the malicious party is not initially authorized. SolarWinds has released updates to address the...

CVE-2023-35188

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-50395

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-35188

SQL Injection Remote Code Execution Vulnerability was found using a create statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...

CVE-2023-50395

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited...