SE
File Transfer
Serv-U
On CISA KEVExploited in the wildRansomware-linked
55
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 19High 20Medium 16Low 0
Watch
Add Serv-U to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28001 | 5.4 | Feb 3 | SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS Affected: before 15.2.2 |
| CVE-2023-40053 | 5.0 | Dec 6 | A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used… Affected: 15.4.0; 15.4.0; 15.4.0 |
| CVE-2024-28072 | 4.9 | May 3 | A highly privileged account can overwrite arbitrary files on the system with log output Affected: before 15.4.2; 15.4.2 |
| CVE-2021-35249 | 4.3 | May 17 | This broken access control vulnerability pertains specifically to a domain admin who can access configuration & user data of other domains which they should not have access to Affected: before 15.3.1 |
| CVE-2024-45714 | 4.1 | Oct 16 | Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload Affected: through 15.4.2.3 |