CVE-2024-28991

HIGH Year: 2024
CVSS v3 Score
8.0
High
Weakness Type
CWE-502
View all →

Vulnerability Description

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

Related Vulnerabilities

CVE-2019-4561

HIGH
CVSS:8.0(High)

IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially ...

CWE-5022019

CVE-2019-6338

HIGH
CVSS:8.0(High)

In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar library. This library has released a security update which i...

CWE-5022019

CVE-2020-26207

HIGH
CVSS:8.0(High)

DatabaseSchemaViewer before version 2.7.4.3 is vulnerable to arbitrary code execution if a user is tricked into opening a specially crafted `.dbschema` file. The patch was released in v2.7.4.3. As a w...

CWE-5022020

CVE-2021-21604

HIGH
CVSS:8.0(High)

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantia...

CWE-5022021

CVE-2021-23895

HIGH
CVSS:8.0(High)

Deserialization of untrusted data vulnerability in McAfee Database Security (DBSec) prior to 4.8.2 allows a remote authenticated attacker to create a reverse shell with administrator privileges on the...

CWE-5022021

CVE-2022-39256

HIGH
CVSS:8.0(High)

Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CM...

CWE-5022022