ServU vulnerabilities

2 known vulnerabilities in ServU from SolarWinds. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  ServU: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-28073Apr 17, 2024SolarWindsEPSS 1.12%

  SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.

• 7.5 High severity

  ServU: Cleartext Transmission of Sensitive Information

  CVE-2023-23841Jun 15, 2023SolarWinds

  SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request. Part of the URL of the request discloses sensitive data.