CVE-2024-23472

8.0 highEPSS 19%

High (8.0) in solarwinds access rights manager. EPSS 19% chance of exploitation in the next 30 days.

SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solarwinds:access_rights_manager

References

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm

Check your stack JSON