Solarwinds Serv-U vulnerabilities

CVE-2018-10240 [HIGH] CWE-331 CVE-2018-10240: SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token tha SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in requests to the application as a URL parameter in lieu of a session cookie. This session token's value can be brute-forced by an attacker to obtain the corresponding session cookie and hijack the user's session.

CVE-2021-35245 [MEDIUM] CWE-284 CVE-2021-35245: When a user has admin rights in Serv-U Console, the user can move, create and delete any files are a When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

CVE-2020-28001 [MEDIUM] CWE-79 CVE-2020-28001: SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS. SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.

CVE-2026-28315 [MEDIUM] CWE-79 CVE-2026-28315: SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account.

CVE-2018-10241 [MEDIUM] CWE-476 CVE-2018-10241: A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated us A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereference) via a specially crafted URL beginning with the /Web%20Client/ substring.

CVE-2020-15573 [MEDIUM] CWE-79 CVE-2020-15573: SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 000 SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.

CVE-2021-32604 [MEDIUM] CWE-79 CVE-2021-32604: Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."

CVE-2022-38106 [MEDIUM] CWE-79 CVE-2022-38106: This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability af This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.

CVE-2024-28072 [MEDIUM] CWE-532 CVE-2024-28072: A highly privileged account can overwrite arbitrary files on the system with log output. The log fil A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.

CVE-2023-40053 [MEDIUM] CWE-20 CVE-2023-40053: A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

CVE-2020-35482 [MEDIUM] CWE-79 CVE-2020-35482: SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS. SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.

CVE-2020-15575 [MEDIUM] CWE-79 CVE-2020-15575: SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Num SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194.

CVE-2024-45712 [MEDIUM] CWE-79 CVE-2024-45712: SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulne SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.

CVE-2021-35249 [MEDIUM] CWE-284 CVE-2021-35249: This broken access control vulnerability pertains specifically to a domain admin who can access conf This broken access control vulnerability pertains specifically to a domain admin who can access configuration & user data of other domains which they should not have access to. Please note the admin is unable to modify the data (read only operation). This UAC issue leads to a data leak to unauthorized users for a domain, with no log of them accessin

CVE-2024-45714 [MEDIUM] CWE-79 CVE-2024-45714: Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permis Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload.