Solarwinds Serv-u vulnerabilities

• solarwinds serv-u SolarWinds Serv-U Broken Access Control Vulnerability CVE-2026-28321 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28317 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28316 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability CVE-2026-28315 6.2 MediumJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28314 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28313 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28312 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28310 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Broken Access Control Vulnerability CVE-2026-28309 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28308 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28307 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Privilege Escalation Vulnerability CVE-2026-28306 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28305 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Remote Code Execution Vulnerability CVE-2026-28304 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability CVE-2026-28302 9.1 CriticalJuly 21, 2026
• solarwinds serv-u SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability CVE-2026-28318 In KEVPublic exploit EPSS 48.0% 7.5 HighJune 4, 2026
• solarwinds serv-u SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability CVE-2025-40541 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability CVE-2025-40540 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability CVE-2025-40539 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability CVE-2025-40538 9.1 CriticalFebruary 24, 2026
• solarwinds serv-u SolarWinds Serv-U Path Restriction Bypass Vulnerability CVE-2025-40549 9.1 CriticalNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability CVE-2025-40548 9.1 CriticalNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability CVE-2025-40547 9.1 CriticalNovember 18, 2025
• solarwinds serv-u SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability CVE-2024-45712 Public exploit 2.6 LowApril 15, 2025
• solarwinds serv-u SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability CVE-2024-45711 7.5 HighOctober 16, 2024
• solarwinds serv-u SolarWinds Serv-U Stored XSS Vulnerability CVE-2024-45714 4.8 MediumOctober 16, 2024
• solarwinds serv-u SolarWinds Serv-U L Directory Transversal Vulnerability CVE-2024-28995 In KEVPublic exploit EPSS 99.6% 8.6 HighJune 6, 2024
• solarwinds serv-u Arbitrary File Overwrite Vulnerability CVE-2024-28072 5.7 MediumMay 3, 2024
• solarwinds serv-u, servu +1 more SolarWinds Serv-U Directory Traversal Remote Code Execution Vulnerability CVE-2024-28073 8.4 HighApril 17, 2024
• solarwinds serv-u HTML injection Vulnerability in Serv-U 15.4 CVE-2023-40053 5.0 MediumDecember 6, 2023
• solarwinds serv-u 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1 CVE-2023-40060 7.2 HighSeptember 7, 2023
• solarwinds serv-u 2FA/MFA Bypass Vulnerability in Serv-U 15.4 CVE-2023-35179 7.2 HighAugust 10, 2023
• solarwinds serv-u, servu +1 more SolarWinds Serv-U Exposure of Sensitive Information Vulnerability CVE-2023-23841 7.5 HighJune 15, 2023
• solarwinds serv-u, serv-u file server +1 more Cross-Site Scripting Vulnerability in Serv-U Web Client CVE-2022-38106 5.4 MediumDecember 16, 2022
• solarwinds serv-u, serv-u ftp server +1 more Common Key Vulnerability in Serv-U FTP Server CVE-2021-35252 7.5 HighDecember 16, 2022
• solarwinds serv-u Domain Admin Broken Access Control CVE-2021-35249 4.3 MediumMay 17, 2022
• solarwinds serv-u Directory Transversal Vulnerability in Serv-U 15.3 CVE-2021-35250 Public exploit EPSS 12.8% 7.5 HighApril 25, 2022
• solarwinds serv-u Improper Input Validation Vulnerability in Serv-U CVE-2021-35247 In KEV 4.3 MediumJanuary 7, 2022
• solarwinds serv-u, serv-u server +1 more A valid CSRF token is present in response to an invalid request CVE-2021-35242 8.3 HighDecember 6, 2021
• solarwinds serv-u, serv-u ftp +1 more Broken Access Control Vulnerability for SolarWinds Serv-U CVE-2021-35245 8.4 HighDecember 6, 2021
• solarwinds serv-u Execute Command Function Allows Remote Code Execution (RCE)Vulnerability CVE-2021-35223 8.5 HighAugust 31, 2021
• solarwinds serv-u, serv-u managed file transfer server and serv-u secured ftp +1 more Serv-U Remote Memory Escape Vulnerability CVE-2021-35211 In KEVPublic exploit EPSS 91.2% 9.0 CriticalJuly 14, 2021
• solarwinds serv-u SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter. CVE-2021-32604 5.4 MediumMay 11, 2021
• solarwinds serv-u ftp server, serv-u mft server +1 more SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a... CVE-2020-22428 4.8 MediumMay 5, 2021
• solarwinds serv-u file server SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. CVE-2021-25179 6.1 MediumMay 5, 2021
• solarwinds serv-u An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can... CVE-2021-3154 7.5 HighMay 4, 2021
• solarwinds serv-u In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files ... CVE-2021-25276 7.1 HighFebruary 3, 2021
• solarwinds serv-u SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. CVE-2020-28001 5.4 MediumFebruary 3, 2021
• solarwinds serv-u SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal. CVE-2020-27994 6.5 MediumFebruary 3, 2021
• solarwinds serv-u SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. CVE-2020-35482 5.4 MediumFebruary 3, 2021
• Show olderLoading…