Serv U Ftp Server

serv-u_ftp_server

Vendor: Solarwinds • 11 CVEs

CVEs (11)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-22428 1Solarwinds 2Serv U Ftp Server Serv U Mft Server Nov 21, 2024 May 5, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
CVE-2020-15543 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Jul 5, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
CVE-2020-15542 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Jul 5, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
CVE-2020-15541 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Jul 5, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
CVE-2019-19829 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Dec 18, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
CVE-2019-13182 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Dec 16, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
CVE-2019-13181 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Dec 16, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
CVE-2019-12181 1Solarwinds 2Serv U Ftp Server Serv U Mft Server Nov 21, 2024 Jun 17, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
CVE-2018-19999 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Jun 7, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SY...Show more The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SYSTEM account, leading to privilege escalation. To exploit this vulnerability, an attacker must have local access the the host running Serv-U, and a Serv-U administrator have an active management console session.Show less
CVE-2018-19934 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Mar 21, 2019 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.
CVE-2018-15906 1Solarwinds 1Serv U Ftp Server Nov 21, 2024 Mar 21, 2019 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.