access_rights_manager

productNL

cpe:2.3:a:solarwinds:access_rights_manager:previous_versions:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

critical

by severity

0critical15high0medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-23472US	high8.0	18.6% (97th)	—	no fix	2024-07-17	—
CVE-2024-23469US	high8.8	17.9% (97th)	—	no fix	2024-07-17	—
CVE-2024-28074US	high8.8	10.9% (96th)	—	no fix	2024-07-17	—
CVE-2024-23468US	high8.3	3.38% (89th)	—	no fix	2024-07-17	—
CVE-2024-28991US	high8.0	3.08% (88th)	—	no fix	2024-09-12	—
CVE-2024-23467US	high8.8	2.93% (87th)	—	no fix	2024-07-17	—
CVE-2024-23466US	high8.8	2.54% (85th)	—	no fix	2024-07-17	—
CVE-2024-23475US	high8.8	2.08% (81st)	—	no fix	2024-07-17	—
CVE-2024-23465US	high8.8	1.94% (80th)	—	no fix	2024-07-17	—
CVE-2024-28992US	high8.3	1.89% (79th)	—	no fix	2024-07-17	—
CVE-2024-23474US	high8.8	1.52% (74th)	—	no fix	2024-07-17	—
CVE-2024-23471US	high8.8	1.34% (71st)	—	no fix	2024-07-17	—
CVE-2024-23470US	high8.8	1.17% (67th)	—	no fix	2024-07-17	—
CVE-2024-28993US	high8.3	0.95% (61st)	—	no fix	2024-07-17	—
CVE-2024-28990US	high8.8OT elevated	0.47% (41st)	—	no fix	2024-09-12	—

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9 CVEs
CWE-287Improper Authentication4 CVEs
CWE-749Exposed Dangerous Method or Function3 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-798Use of Hard-coded Credentials1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.