PT-2022-1537

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions prior to 15.3 Description The issue is related to improper input validation in the Serv-U web login screen, specifically with LDAP authentication, allowing characters that were not sufficiently sanitized. This could...

CVE-2021-35247: Improper Input Validation

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper...

CVE-2021-36381

In Edifecs Transaction Management through 2021-07-12, an unauthenticated user can inject arbitrary text into a user's browser via logon.jsp?logonerror= on the login screen of the Web application...