deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-39245
Published: 2024-02-15
Description: 
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: https://www.dell.com/support/kbdoc/en-us/000216654/dsa-2023-299-security-update-for-dell-esi-enterprise-storage-integrator-for-sap-lama-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000216654/dsa-2023-299-security-update-for-dell-esi-enterprise-storage-integrator-for-sap-lama-multiple-security-vulnerabilities
CVE: CVE-2024-1530
Published: 2024-02-15
Description: A vulnerability, which was classified as critical, has been found in ECshop 4.1.8. Affected by this issue is some unknown functionality of the file /admin/view_sendlist.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-250562 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/curlyyyyyyyy/ecshop/blob/main/README.md; https://vuldb.com/?ctiid.250562; https://vuldb.com/?id.250562
CVE: CVE-2024-20726
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20727
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20728
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20729
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1890; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20730
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1906; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20731
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1901; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20733
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20734
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20735
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1905; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20736
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20738
Published: 2024-02-15
Description: Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of this issue does not require user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-10.html; https://helpx.adobe.com/security/products/framemaker-publishing-server/apsb24-10.html
CVE: CVE-2024-20739
Published: 2024-02-15
Description: Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/audition/apsb24-11.html; https://helpx.adobe.com/security/products/audition/apsb24-11.html
CVE: CVE-2024-20747
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1908; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20748
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1909; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20749
Published: 2024-02-15
Description: Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/acrobat/apsb24-07.html; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1910; https://helpx.adobe.com/security/products/acrobat/apsb24-07.html
CVE: CVE-2024-20750
Published: 2024-02-15
Description: Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/substance3d_designer/apsb24-13.html; https://helpx.adobe.com/security/products/substance3d_designer/apsb24-13.html
CVE: CVE-2023-26206
Published: 2024-02-15
Description: An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7.2.0 allows an attacker to execute unauthorized code or commands via the name fields observed in the policy audit logs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/psirt/FG-IR-23-063; https://fortiguard.com/psirt/FG-IR-23-063
CVE: CVE-2023-44253
Published: 2024-02-15
Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.1 and before 7.2.5 and FortiAnalyzer-BigData before 7.2.5 allows an adom administrator to enumerate other adoms and device names via crafted HTTP or HTTPS requests.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-23-268; https://github.com/orangecertcc/security-research/security/advisories/GHSA-25j8-69h7-83h2; https://fortiguard.com/psirt/FG-IR-23-268
CVE: CVE-2023-45581
Published: 2024-02-15
Description: An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://fortiguard.com/psirt/FG-IR-23-357; https://fortiguard.com/psirt/FG-IR-23-357
CVE: CVE-2023-47537
Published: 2024-02-15
Description: An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6.4 all versions	 allows a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the FortiLink communication channel between the FortiOS device and FortiSwitch.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-295
References: https://fortiguard.com/psirt/FG-IR-23-301; https://fortiguard.com/psirt/FG-IR-23-301
CVE: CVE-2024-20716
Published: 2024-02-15
Description: Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-400
References: https://helpx.adobe.com/security/products/magento/apsb24-03.html; https://helpx.adobe.com/security/products/magento/apsb24-03.html
CVE: CVE-2024-20717
Published: 2024-02-15
Description: Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb24-03.html; https://helpx.adobe.com/security/products/magento/apsb24-03.html
CVE: CVE-2024-20718
Published: 2024-02-15
Description: Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which could be used to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction, typically in the form of the victim clicking a link or visiting a malicious website.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://helpx.adobe.com/security/products/magento/apsb24-03.html; https://helpx.adobe.com/security/products/magento/apsb24-03.html
CVE: CVE-2024-20719
Published: 2024-02-15
Description: Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into every admin page. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field, that could be leveraged to gain admin access. 
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb24-03.html; https://helpx.adobe.com/security/products/magento/apsb24-03.html
CVE: CVE-2024-20720
Published: 2024-02-15
Description: Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://helpx.adobe.com/security/products/magento/apsb24-03.html; https://helpx.adobe.com/security/products/magento/apsb24-03.html
CVE: CVE-2024-23113
Published: 2024-02-15
Description: A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-134
References: https://fortiguard.com/psirt/FG-IR-24-029; https://fortiguard.com/psirt/FG-IR-24-029; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-23113
CVE: CVE-2023-4993
Published: 2024-02-15
Description: Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.This issue affects SoliPay Mobile App: before 5.0.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-648
References: https://www.usom.gov.tr/bildirim/tr-24-0104; https://www.usom.gov.tr/bildirim/tr-24-0104
CVE: CVE-2023-5155
Published: 2024-02-15
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection.This issue affects SoliPay Mobile App: before 5.0.8.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0104; https://www.usom.gov.tr/bildirim/tr-24-0104
CVE: CVE-2023-6255
Published: 2024-02-15
Description: Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable.This issue affects SoliPay Mobile App: before 5.0.8.


CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://www.usom.gov.tr/bildirim/tr-24-0104; https://www.usom.gov.tr/bildirim/tr-24-0104
CVE: CVE-2023-7081
Published: 2024-02-15
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection.This issue affects Online Payment System: before 14.02.2024.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-24-0103; https://www.usom.gov.tr/bildirim/tr-24-0103
CVE: CVE-2023-6937
Published: 2024-02-15
Description: wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was possible that an unencrypted (D)TLS 1.3 record from the server containing first a ServerHello message and then the rest of the first server flight would be accepted by a wolfSSL client. In (D)TLS 1.3 the handshake is encrypted after the ServerHello but a wolfSSL client would accept an unencrypted flight from the server. This does not compromise key negotiation and authentication so it is assigned a low severity rating.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/wolfSSL/wolfssl/pull/7029; https://www.wolfssl.com/docs/security-vulnerabilities/; https://github.com/wolfSSL/wolfssl/pull/7029
CVE: CVE-2024-25373
Published: 2024-02-15
Description: Tenda AC10V4.0 V16.03.10.20 was discovered to contain a stack overflow via the page parameter in the sub_49B384 function.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-120
References: https://github.com/cvdyfbwa/IoT-Tenda-Router/blob/main/sub_49B384.md; https://github.com/cvdyfbwa/IoT-Tenda-Router/blob/main/sub_49B384.md
CVE: CVE-2024-25502
Published: 2024-02-15
Description: Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/flusity/flusity-CMS/issues/10; https://github.com/flusity/flusity-CMS/issues/10
CVE: CVE-2023-40057
Published: 2024-02-15
Description: The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

CVSS Score: 9.0 (CRITICAL)
CWE: CWE-502
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40057; https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40057
CVE: CVE-2023-6123
Published: 2024-02-15
Description: Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack. 



CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-707
References: https://portal.microfocus.com/s/article/KM000026128?language=en_US; https://portal.microfocus.com/s/article/KM000026128?language=en_US
CVE: CVE-2024-0240
Published: 2024-02-15
Description: A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending notifications to multiple clients, this results in all Bluetooth operations, such as advertising and scanning, to stop.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://community.silabs.com/069Vm000001AjEfIAK; https://github.com/SiliconLabs/gecko_sdk; https://community.silabs.com/069Vm000001AjEfIAK
CVE: CVE-2024-0622
Published: 2024-02-15
Description: Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when installed on Non-Windows platforms. The vulnerability could allow local privilege escalation. 

CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://portal.microfocus.com/s/article/KM000026555?language=en_US; https://portal.microfocus.com/s/article/KM000026555?language=en_US
CVE: CVE-2024-21728
Published: 2024-02-15
Description: An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/solracsf/osTicky; https://github.com/solracsf/osTicky
CVE: CVE-2024-23476
Published: 2024-02-15
Description: The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

CVSS Score: 9.6 (CRITICAL)
CWE: CWE-22
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23476; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23476
CVE: CVE-2024-23477
Published: 2024-02-15
Description: The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

CVSS Score: 7.9 (HIGH)
CWE: CWE-22, CWE-22
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23477; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23477
CVE: CVE-2024-23478
Published: 2024-02-15
Description: SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service, resulting in remote code execution.

CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23478; https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-23478