CVE-2020-22428

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...

CVE-2021-25179

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2020-22428

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...

Cross site scripting

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...

Cross site scripting

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2021-25179

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2020-22428

The provided data confirms a concrete vulnerability: SolarWinds Serv-U prior to version 15.1.6 Hotfix 3 is affected by Cross-Site Scripting (XSS) via a directory name entered by an administrator containing a JavaScript payload. Affected component: Serv-U FTP server; vulnerability arises from impr...

CVE-2020-22428

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...

CVE-2021-25179

SolarWinds Serv-U File Server vulnerable to Cross Site Scripting (XSS) via the HTTP Host header in versions before 15.2. The root cause is XSS arising from host header handling. Impact is content integrity/defacement risk on affected deployments; no exploitation details are provided. Remediation:...

CVE-2021-25179

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2020-22428: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting XSS via a directory name entered by an admin containing a JavaScript payload...

CVE-2021-25179: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting XSS via the HTTP Host header...

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

Design/Logic Flaw

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

CVE-2021-3154

Technical details about CVE-2021-3154 are not publicly provided in the supplied documents. The connected EU, RH, NVD entries only reiterate unauthenticated macro injection against SolarWinds Serv-U prior to 15.2.2. Monitor for updates.

CVE-2021-3154

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...

SolarWinds Serv-U FTP Server 跨站脚本漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U versions prior to 15.1.6, which originates from being subject to cross-site scripting XSS via a directory name containin...

CVE-2021-3154: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481...