Solarwinds Serv-U vulnerabilities

CVE-2021-35211 [CRITICAL] CWE-787 CVE-2021-35211: Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product ut Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affe

CVE-2024-28995 [HIGH] CWE-22 CVE-2024-28995: SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access t SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

CVE-2026-28318 [HIGH] CWE-400 CVE-2026-28318: SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service wi SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update

CVE-2021-35247 [MEDIUM] CWE-20 CVE-2021-35247: Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sa Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed i

CVE-2021-35250 [HIGH] CWE-22 CVE-2021-35250: A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

CVE-2024-45711 [HIGH] CWE-22 CVE-2024-45711: SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

CVE-2020-35481 [CRITICAL] CVE-2020-35481: SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection. SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.

CVE-2021-35223 [HIGH] CWE-20 CVE-2021-35223: The Serv-U File Server allows for events such as user login failures to be audited by executing a co The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.

CVE-2025-40548 [CRITICAL] CWE-269 CVE-2025-40548: A missing validation process exists in Serv U when abused, could give a malicious actor with access A missing validation process exists in Serv U when abused, could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVE-2025-40549 [CRITICAL] CWE-22 CVE-2025-40549: A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious ac A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute code on a directory. This issue requires administrative privileges to abuse. On Windows systems, this scored as medium due to differences in how paths and home directories are handled.

CVE-2025-40547 [CRITICAL] CWE-116 CVE-2025-40547: A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with acc A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVE-2025-40538 [HIGH] CWE-269 CVE-2025-40538: A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium bec

CVE-2025-40539 [HIGH] CWE-704 CVE-2025-40539: A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ab A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by defau

CVE-2025-40540 [HIGH] CWE-704 CVE-2025-40540: A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ab A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by defau

CVE-2025-40541 [HIGH] CWE-704 CVE-2025-40541: An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, giv An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged servic

CVE-2023-35179 [HIGH] CWE-284 CVE-2023-35179: A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypas A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action.

CVE-2023-40060 [HIGH] CWE-284 CVE-2023-40060: A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action. 15.4. SolarWinds found that the issue was not completely fixed in 15.4 Hotfix 1.

CVE-2021-3154 [HIGH] CVE-2021-3154: An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve c An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.

CVE-2024-28073 [HIGH] CWE-22 CVE-2024-28073: SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. Th SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.

CVE-2021-35242 [HIGH] CWE-352 CVE-2021-35242: Serv-U server responds with valid CSRFToken when the request contains only Session. Serv-U server responds with valid CSRFToken when the request contains only Session.