Vulnerability Details CVE-2024-45711
SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability
Exploit prediction scoring system (EPSS) score
EPSS Score 0.016
EPSS Ranking 80.7%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-45711
-
cpe:2.3:a:solarwinds:serv-u:15.1
-
cpe:2.3:a:solarwinds:serv-u:15.1.1
-
cpe:2.3:a:solarwinds:serv-u:15.1.2
-
cpe:2.3:a:solarwinds:serv-u:15.1.3
-
cpe:2.3:a:solarwinds:serv-u:15.1.4
-
cpe:2.3:a:solarwinds:serv-u:15.1.5
-
cpe:2.3:a:solarwinds:serv-u:15.1.6
-
cpe:2.3:a:solarwinds:serv-u:15.1.7
-
cpe:2.3:a:solarwinds:serv-u:15.2.1
-
cpe:2.3:a:solarwinds:serv-u:15.2.2
-
cpe:2.3:a:solarwinds:serv-u:15.2.3
-
cpe:2.3:a:solarwinds:serv-u:15.2.4
-
cpe:2.3:a:solarwinds:serv-u:15.2.5
-
cpe:2.3:a:solarwinds:serv-u:15.3
-
cpe:2.3:a:solarwinds:serv-u:15.3.0
-
cpe:2.3:a:solarwinds:serv-u:15.3.1
-
cpe:2.3:a:solarwinds:serv-u:15.3.2
-
cpe:2.3:a:solarwinds:serv-u:15.4.0