Class familySolarWinds · Serv-U
SolarWinds Serv-U path traversal flaws, 2022–2024
3 Serv-U CVEs with CWE-22 weaknesses, 25 Apr 2022 to 16 Oct 2024. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2022’22
2023’23
2 2024’24
In CISA KEVNot in KEV
20221 CVE
20242 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-35250 | 25 Apr 2022 | Directory Transversal Vulnerability in Serv-U 15.3 | Grouped by weakness | 66.1 |
| CVE-2024-28995KEV | 6 Jun 2024 | SolarWinds Serv-U Path Traversal Vulnerability | Grouped by weakness | 68.2 |
| CVE-2024-45711 | 16 Oct 2024 | SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability | Grouped by weakness | 24.0 |