Solarwinds Serv-u Ftp Server — known CVE vulnerabilities

Every CVE whose affected-product data names Solarwinds Serv-u Ftp Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2020-15541 — CVSS 9.8 (critical): SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
• CVE-2020-15542 — CVSS 9.8 (critical): SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
• CVE-2020-15543 — CVSS 9.8 (critical): SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
• CVE-2019-12181 — CVSS 8.8 (high): A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
• CVE-2018-19999 — CVSS 7.8 (high): The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 has incorrect access controls that permit local users to bypass…
• CVE-2018-15906 — CVSS 7.2 (high): SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and…
• CVE-2019-13181 — CVSS 6.5 (medium): A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
• CVE-2019-13182 — CVSS 5.4 (medium): A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.
• CVE-2019-19829 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability…
• CVE-2018-19934 — CVSS 4.8 (medium): SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST…
• CVE-2020-22428 — CVSS 4.8 (medium): SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a…