Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityPatch nowKEVEPSS 1.94%Jun 4, 2026
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Check if you run itEPSS 0.59%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.2A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary co…Check if you run itEPSS 0.52%Feb 24, 2026
- Low2.6SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability.Check this weekEPSS 38.00%Apr 15, 2025
- High7.5SolarWinds Serv-U Path Traversal VulnerabilityPatch nowKEVEPSS 99.61%Jun 6, 2024
- UnknownSolarWinds Serv-U Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 12.80%Dec 24, 2023
- Medium5.3SolarWinds Serv-U Improper Input Validation VulnerabilityPatch nowKEVEPSS 3.45%Jan 10, 2022
- Critical10.0SolarWinds Serv-U Remote Code Execution VulnerabilityPatch nowKEVEPSS 91.16%Jul 13, 2021
10 records · page 1 of 1
PreviousNext