2 matches found
CVE-2021-32604: Improper Neutralization of Input During Web Page Generation
Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."...
5.4CVSS5.8AI score0.0172EPSS
SaveExploits1References2
PT-2021-19802
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions prior to 15.2.3 Description The issue concerns the mishandling of the user-supplied SenderEmail parameter in the Share/IncomingWizard.htm page, leading to a potential security issue. Recommendations For versions prio...
5.4CVSS0.0172EPSS
SaveExploits1References5
20