TI-2019-09097 CVE-2019-12181 · GHSA-3qcp-g78m-7jv9
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
Priority HIGH 74
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
SolarWinds
Records350All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical82CVSS 9.0–10.0
CVSS high139CVSS 7.0–8.9
Exploited now
SolarWinds records in CISA KEVTI-2026-22619 SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability TI-2025-19358 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability TI-2025-27034 SolarWinds Web Help Desk Security Control Bypass Vulnerability TI-2025-27044 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability TI-2024-19176 SolarWinds Web Help Desk Hardcoded Credential Vulnerability TI-2024-19175 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Serv-u Ftp Server · all components
TI-2020-12237 CVE-2020-15541 · GHSA-xqcr-vmvx-c673
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
Priority MEDIUM 52
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
TI-2020-12239 CVE-2020-15543 · GHSA-c5p8-2j89-8vv3
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
Priority MEDIUM 45
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
TI-2020-12238 CVE-2020-15542 · GHSA-33g2-5xpr-jrcj
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
Priority MEDIUM 45
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
TI-2018-11342 CVE-2018-15906 · GHSA-6v7c-w9v8-4qwf
SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute…
Priority MEDIUM 42
SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.
TI-2019-09876 CVE-2019-13181 · GHSA-8rpj-mgcc-4hwx
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
Priority LOW 35
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
TI-2018-14179 CVE-2018-19999 · GHSA-wqvr-3mqv-m62m
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect…
Priority LOW 35
The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass authentication in the application and execute code in the context of the Windows SY…
TI-2019-09877 CVE-2019-13182 · GHSA-cvx6-jrrp-gc3h
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
Priority LOW 34
A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
TI-2018-14124 CVE-2018-19934 · GHSA-qrmq-pmv4-35gc
SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the…
Priority LOW 30
SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.
TI-2019-14292 CVE-2019-19829 · GHSA-6g3j-f6fw-33hm
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7…
Priority LOW 29
A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182.
TI-2020-14339 CVE-2020-22428 · GHSA-hp3w-fp2m-cj47
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a…
Priority LOW 24
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.