CVE-2020-15574

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

CVE-2020-15576

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

CVE-2020-15573

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

Information disclosure

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

Cross site scripting

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

Cross site scripting

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

Design/Logic Flaw

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

CVE-2020-15573

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

CVE-2020-15573

SolarWinds Serv-U File Server prior to version 15.2.1 is affected by a cross-site scripting (XSS) vulnerability (Case Numbers 00041778 and 00306421). The root cause is the WEB application not adequately validating client-side data, enabling a potentially malicious script to be executed in a user’...

CVE-2020-15574

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

CVE-2020-15574

CVE-2020-15574 affects SolarWinds Serv-U File Server prior to 15.2.1. The root cause is mishandling of the Same-Site cookie attribute, leading to potential exposure of sensitive information via crafted requests. Multiple sources (NVD, Red Hat advisory, CNVD) confirm the same issue and reference t...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability. The root cause is a lack of proper validation of client‑side data by the WEB application, enabling XSS as noted by Tenable Scan (Case 00484194). Affected product/version: SolarWinds Serv-U File ...

CVE-2020-15575

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...

CVE-2020-15576

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

CVE-2020-15576

CVE-2020-15576 affects SolarWinds Serv-U File Server prior to version 15.2.1. The vulnerability enables information disclosure via an HTTP response. The vulnerability is documented across multiple sources (including Red Hat and CNVD/CVE records) confirming the affected product as SolarWinds Serv-...

PT-2020-14503

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows for XSS, as demonstrated by Tenable Scan. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

PT-2020-14502

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to the mishandling of the Same-Site cookie attribute. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15573: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...

CVE-2020-15575: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...