Solarwinds Serv-u_ftp_server
11 CVEs affecting Solarwinds Serv-u_ftp_server. Latest disclosed: 2021-05-05. Critical: 3, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15543 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path. |
CVE-2020-15542 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command. |
CVE-2020-15541 | Critical | 9.8 | 2020-07-05 | SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. |
CVE-2019-12181 | High | 8.8 | 2019-06-17 | A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux. |
CVE-2018-19999 | High | 7.8 | 2019-06-07 | The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the… |
CVE-2018-15906 | High | 7.2 | 2019-03-21 | SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. |
CVE-2019-13181 | Medium | 6.5 | 2019-12-16 | A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7. |
CVE-2019-19829 | Medium | 5.4 | 2019-12-18 | A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934… |
CVE-2019-13182 | Medium | 5.4 | 2019-12-16 | A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7. |
CVE-2020-22428 | Medium | 4.8 | 2021-05-05 | SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload. |
CVE-2018-19934 | Medium | 4.8 | 2019-03-21 | SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter. |