Show filters
12 Total Results
Displaying 1-10 of 12
Sort by:
Attacker Value
Very High
Serv-U FTP Server prepareinstallation Privilege Escalation
Disclosure Date: June 17, 2019 (last updated November 27, 2024)
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
3
Attacker Value
Unknown
CVE-2020-22428
Disclosure Date: May 05, 2021 (last updated February 22, 2025)
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
0
Attacker Value
Unknown
CVE-2020-15542
Disclosure Date: July 05, 2020 (last updated November 28, 2024)
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
0
Attacker Value
Unknown
CVE-2020-15541
Disclosure Date: July 05, 2020 (last updated November 28, 2024)
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
0
Attacker Value
Unknown
CVE-2020-15543
Disclosure Date: July 05, 2020 (last updated February 21, 2025)
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
0
Attacker Value
Unknown
CVE-2019-19829
Disclosure Date: December 18, 2019 (last updated November 27, 2024)
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
0
Attacker Value
Unknown
CVE-2019-13181
Disclosure Date: December 16, 2019 (last updated November 27, 2024)
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
0
Attacker Value
Unknown
CVE-2019-13182
Disclosure Date: October 10, 2019 (last updated November 27, 2024)
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
0
Attacker Value
Unknown
CVE-2018-19999
Disclosure Date: June 07, 2019 (last updated November 27, 2024)
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have local access the the host running Serv-U, and a Serv-U administrator have an active management console session.
0
Attacker Value
Unknown
CVE-2018-19934
Disclosure Date: March 21, 2019 (last updated November 27, 2024)
SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.
0
