Vulnerabilities (CVE)

Filtered by vendor Solarwinds Subscribe
Filtered by product Serv-u Ftp Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-22428 1 Solarwinds 2 Serv-u Ftp Server, Serv-u Mft Server 2021-05-17 3.5 LOW 4.8 MEDIUM
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
CVE-2019-13181 1 Solarwinds 1 Serv-u Ftp Server 2020-08-24 4.0 MEDIUM 6.5 MEDIUM
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
CVE-2019-19829 1 Solarwinds 1 Serv-u Ftp Server 2019-12-23 3.5 LOW 5.4 MEDIUM
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
CVE-2019-13182 1 Solarwinds 1 Serv-u Ftp Server 2019-12-18 3.5 LOW 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
CVE-2018-19934 1 Solarwinds 1 Serv-u Ftp Server 2019-03-25 3.5 LOW 4.8 MEDIUM
SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.