Login Request a demo
SF
Product
Serv-u Ftp Server
by Solarwinds · last CVE May 5, 2021
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 3High 3Medium 5Low 0
Severity
All severities11Critical3High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Serv-u Ftp Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15543
9.8
2%
Jul 5
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path
Affected: before 15.2.1
CVE-2020-15542
9.8
2%
Jul 5
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command
Affected: before 15.2.1
CVE-2020-15541
9.8
7%
Jul 5
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution
Affected: before 15.2.1
CVE-2019-12181
8.8
65%
Jun 17
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux
Affected: before 15.1.7
CVE-2018-19999
7.8
1%
Jun 7
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and…
Affected: 15.1.6.25
CVE-2018-15906
7.2
8%
Mar 17
SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file
Affected: 15.1.6
CVE-2019-13181
6.5
3%
Dec 16
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7
Affected: 15.1.7
CVE-2019-19829
5.4
2%
Dec 18
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182
Affected: 15.1.7
CVE-2019-13182
5.4
6%
Dec 16
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7
Affected: 15.1.7
CVE-2020-22428
4.8
1%
May 5
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload
Affected: 15.1
CVE-2018-19934
4.8
5%
Mar 17
SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter
Affected: 15.1.6.25
Showing 11