Solarwinds: >> Serv-U Ftp Server >> 15.1 Security Vulnerabilities
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
CVSS Score
4.8
EPSS Score
0.009
Published
2021-05-05
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
CVSS Score
9.8
EPSS Score
0.212
Published
2020-07-05
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
CVSS Score
9.8
EPSS Score
0.044
Published
2020-07-05
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
CVSS Score
9.8
EPSS Score
0.044
Published
2020-07-05
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
CVSS Score
8.8
EPSS Score
0.513
Published
2019-06-17