1132 matches found
CVE-2020-22428
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...
CVE-2021-25179
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
Cross site scripting
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...
Cross site scripting
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
CVE-2021-25179
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
CVE-2020-22428
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...
CVE-2020-22428
The provided data confirms a concrete vulnerability: SolarWinds Serv-U prior to version 15.1.6 Hotfix 3 is affected by Cross-Site Scripting (XSS) via a directory name entered by an administrator containing a JavaScript payload. Affected component: Serv-U FTP server; vulnerability arises from impr...
CVE-2021-25179
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
CVE-2021-25179
SolarWinds Serv-U File Server vulnerable to Cross Site Scripting (XSS) via the HTTP Host header in versions before 15.2. The root cause is XSS arising from host header handling. Impact is content integrity/defacement risk on affected deployments; no exploitation details are provided. Remediation:...
CVE-2020-22428: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...
PT-2021-10765
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions prior to 15.1.6 Hotfix 3 Description The issue is related to Cross Site Scripting XSS via a directory name containing a JavaScript payload. This payload can be entered by an admin, potentially leading to exploitation...
CVE-2021-25179: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...
PT-2021-16450
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2 Description: The issue is related to Cross Site Scripting XSS that can be triggered via the HTTP Host header. Recommendations: For versions prior to 15.2, update to version 15.2 or later to resolve the...
CVE-2021-3154
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...
CVE-2021-3154
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...
CVE-2021-3154
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...
Design/Logic Flaw
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...
CVE-2021-3154
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...
CVE-2021-3154
Technical details about CVE-2021-3154 are not publicly provided in the supplied documents. The connected EU, RH, NVD entries only reiterate unauthenticated macro injection against SolarWinds Serv-U prior to 15.2.2. Monitor for updates.
SolarWinds Serv-U File Server 跨站脚本漏洞
Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2, which originates from exposure to cross-site scripting XSS via the HTTP host header...