solarwinds access rights manager

Name: solarwinds access rights manager
Brand: solarwinds

productUS

cpe:2.3:a:solarwinds:access_rights_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

5critical20high1medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-23478US	—	81.6% (100th)	—	2023.2.3	2024-02-15	< 2023.2.3
CVE-2024-28075US	high8.0	78.0% (100th)	—	2023.2.4	2024-05-14	< 2023.2.4
CVE-2023-35180US	high8.8	28.8% (98th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2024-23472US	high8.0	18.6% (97th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23469US	high8.8	17.9% (97th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-28074US	high8.8	10.9% (96th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23477US	critical9.6	7.85% (95th)	—	2023.2.3	2024-02-15	< 2023.2.3
CVE-2024-23476US	—	7.08% (94th)	—	2023.2.3	2024-02-15	< 2023.2.3
CVE-2024-23479US	—	5.79% (93rd)	—	2023.2.3	2024-02-15	< 2023.2.3
CVE-2023-40057US	—	4.85% (92nd)	—	2023.2.2	2024-02-15	< 2023.2.2
CVE-2024-23468US	high8.3	3.38% (89th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2023-35187US	critical9.8	3.29% (88th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2024-28991US	high8.0	3.08% (88th)	—	2024.3.1	2024-09-12	< 2024.3.1
CVE-2024-23467US	high8.8	2.93% (87th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2023-35182US	critical9.8	2.63% (85th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2023-35186US	high8.8	2.56% (85th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2024-23466US	high8.8	2.54% (85th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23475US	high8.8	2.08% (81st)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23465US	high8.8	1.94% (80th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-28992US	high8.3	1.89% (80th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2023-35184US	critical9.8	1.66% (77th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2024-23474US	high8.8	1.52% (74th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23471US	high8.8	1.34% (71st)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23470US	high8.8	1.17% (67th)	—	no fix	2024-07-17	≤ 2023.2.4
CVE-2024-23473US	critical9.8OT elevated	1.07% (65th)	—	2023.2.4	2024-05-14	< 2023.2.4
CVE-2024-28993US	high8.3	0.95% (61st)	—	2024.3	2024-07-17	< 2024.3
CVE-2023-40058US	—	0.80% (56th)	—	no fix	2023-12-21	≤ 2023.2.1
CVE-2023-35185US	medium6.8	0.76% (55th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2021-35227US	high7.8	0.48% (41st)	—	no fix	2021-10-21	≤ 2020.2.6
CVE-2024-28990US	high8.8OT elevated	0.47% (41st)	—	2024.3.1	2024-09-12	< 2024.3.1
CVE-2023-35183US	—OT elevated	0.19% (9th)	—	no fix	2023-10-19	≤ 2023.2.0.73
CVE-2023-35181US	high7.8OT elevated	0.18% (7th)	—	no fix	2023-10-19	≤ 2023.2.0.73

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')14 CVEs
CWE-502Deserialization of Untrusted Data10 CVEs
CWE-287Improper Authentication4 CVEs
CWE-749Exposed Dangerous Method or Function3 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-798Use of Hard-coded Credentials2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan