1132 matches found
CVE-2020-27994: Improper Limitation of a Pathname to a Restricted Directory
SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal...
CVE-2020-35482: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS...
PT-2021-11440
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows authenticated directory traversal. Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue...
PT-2021-11773
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows for authenticated reflected XSS. Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue...
SolarWinds Serv-U File Server 跨站脚本漏洞
Solarwinds SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server before 15.2.2, which stems from a WEB application lacking proper authentication of client data. An authenticated attacker could...
SolarWinds Serv-U FTP Server Authorization Issues Vulnerability
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. A security vulnerability exists in SolarWinds Serv-U before 15.2.2 Hotfix 1, which stems from a directory containing a user configuration file which includes a user's password...
PT-2021-11441
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows for Authenticated Stored XSS. This means that an authenticated attacker can inject malicious code into the application, which will then be stored and executed by the...
CVE-2020-28001: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS...
PT-2021-16497
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Hotfix 1 Description: The issue concerns a directory containing user profile files, including password hashes, which is world readable and writable. An unprivileged Windows user with access to the...
PT-2021-11772
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2 Description: The issue allows for Unauthenticated Macro Injection. Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue...
CVE-2020-35481: Undefined Security Weakness
SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection...
CVE-2021-25276: Incorrect Permission Assignment for Critical Resource
In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files that include users' password hashes that is world readable and writable. An unprivileged Windows user having access to the server's filesystem can add an FTP user by copying a valid profile file to thi...
SolarWinds Serv-U File Server Cross-Site Scripting Vulnerability
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
SolarWinds Serv-U File Server Information Disclosure Vulnerability
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1. An attacker can exploit this vulnerability with an HTTP response to cause information disclosure...
Unspecified Vulnerability in SolarWinds Serv-U FTP Server (CNVD-2021-17779)
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1, which stems from the program's failure to properly handle the Same-Site cookie attribute. The vulnerability can be exploited by a...
SolarWinds Serv-U File Server Cross-Site Scripting Vulnerability (CNVD-2020-51523)
SolarWinds Serv-U File Server is a file transfer server from SolarWinds USA. A cross-site scripting vulnerability exists in SolarWinds Serv-U File Server versions prior to 15.2.1. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can...
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15576
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...