3593 matches found
CVE-2020-15573
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
CVE-2020-15573
SolarWinds Serv-U File Server prior to version 15.2.1 is affected by a cross-site scripting (XSS) vulnerability (Case Numbers 00041778 and 00306421). The root cause is the WEB application not adequately validating client-side data, enabling a potentially malicious script to be executed in a user’...
CVE-2020-15574
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
CVE-2020-15574
CVE-2020-15574 affects SolarWinds Serv-U File Server prior to 15.2.1. The root cause is mishandling of the Same-Site cookie attribute, leading to potential exposure of sensitive information via crafted requests. Multiple sources (NVD, Red Hat advisory, CNVD) confirm the same issue and reference t...
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 is affected by a Cross‑Site Scripting (XSS) vulnerability. The root cause is a lack of proper validation of client‑side data by the WEB application, enabling XSS as noted by Tenable Scan (Case 00484194). Affected product/version: SolarWinds Serv-U File ...
CVE-2020-15575
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15576
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...
CVE-2020-15576
CVE-2020-15576 affects SolarWinds Serv-U File Server prior to version 15.2.1. The vulnerability enables information disclosure via an HTTP response. The vulnerability is documented across multiple sources (including Red Hat and CNVD/CVE records) confirming the affected product as SolarWinds Serv-...
PT-2020-14503
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows for XSS, as demonstrated by Tenable Scan. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
CVE-2020-15573: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421...
PT-2020-14504
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue allows information disclosure via an HTTP response. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
PT-2020-14502
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to the mishandling of the Same-Site cookie attribute. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
CVE-2020-15576: Undefined Security Weakness
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response...
PT-2020-14501
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U File Server versions prior to 15.2.1 Description The issue is related to a Cross-script vulnerability. Recommendations For versions prior to 15.2.1, update to version 15.2.1 or later to resolve the issue...
CVE-2020-15575: Improper Neutralization of Input During Web Page Generation
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194...
CVE-2020-15574: Undefined Security Weakness
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893...
Unspecified Vulnerability in SolarWinds Serv-U FTP Server
SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1 that stems from the server not properly handling CHMOD commands, no details of the vulnerability are provided at th...
SolarWinds Serv-U FTP Server Input Validation Error Vulnerability
SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1 that stems from the server not validating parameter paths. No details of the vulnerability are provided at this tim...
SolarWinds Serv-U FTP Server Code Injection Vulnerability
SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A security vulnerability exists in SolarWinds Serv-U FTP Server versions prior to 15.2.1. A remote attacker can exploit the vulnerability to execute commands...