CVE-2020-15574: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...

PT-2020-14501

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to a Cross-script vulnerability. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

CVE-2020-15576: Undefined Security Weakness

SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...

PT-2020-14504

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows information disclosure via an HTTP response. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...

SolarWinds Serv-U FTP Server Input Validation Error Vulnerability

SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1 that stems from the server not validating parameter paths. No details of the vulnerability are provided at this tim...

SolarWinds Serv-U FTP Server Code Injection Vulnerability

SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1. A remote attacker can exploit the vulnerability to execute commands...

Unspecified Vulnerability in SolarWinds Serv-U FTP Server

SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1 that stems from the server not properly handling CHMOD commands, no details of the vulnerability are provided at th...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

Path traversal

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

Design/Logic Flaw

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15541

SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution...

CVE-2020-15541

CVE-2020-15541 affects SolarWinds Serv-U FTP Server before 15.2.1, allowing remote command execution. Several sources (NVD entry; Red Hat advisory; CNVD entry) confirm the vulnerability and version constraint. The NVD metrics indicate a high/severe impact (CVSS v3.1: 9.8, CRITICAL, NETWORK, NONE ...

CVE-2020-15543

CVE-2020-15543 affects SolarWinds Serv-U FTP Server prior to version 15.2.1, where an argument path is not validated, enabling a path traversal vulnerability. CVSS metrics indicate a high impact with critical severity (CVSS‑3.1: 9.8) and substantial network exposure (ATT&CK/attack vector not expl...

CVE-2020-15543

SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path...

CVE-2020-15542

SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command...

CVE-2020-15542

Summary: CVE-2020-15542 affects SolarWinds Serv-U FTP Server prior to version 15.2.1, due to mishandling of the CHMOD command. The connected documents confirm the vendor release of 15.2.1 as a fix (per Serv-U 15-2-1 release notes). Impact (as stated): The CVSS metrics in the reference indicate hi...