Known vulnerabilities in Serv-U FTP Server - page 2

Vendor: SolarWinds
Software CPE: cpe:2.3:a:solarwinds:serv-u_ftp_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 8
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Serv-U FTP Server Serv-U FTP Server is affected by 63 known vulnerabilities: 2 critical, 9 high, 14 medium, 38 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123152 - Improper Access Control
CVE-2025-40541
CWE-284 High
No
No
15.5.4 24.02.2026 SB2026022404
#VU122149 - Protection Mechanism Failure
CVE-2025-40549
CWE-693 Low
No
No
15.5.3 30.01.2026 SB2026013033
#VU122148 - Permissions, Privileges, and Access Controls
CVE-2025-40547
CWE-264 Low
No
No
15.5.3 30.01.2026 SB2026013033
#VU122147 - Improper Access Control
CVE-2025-40548
CWE-284 Low
No
No
15.5.3 30.01.2026 SB2026013033
#VU107461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45712
CWE-79 Low
No
No
15.5.1 15.04.2025 SB2025041528
#VU98773 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45714
CWE-79 Low
No
No
15.5 17.10.2024 SB2024101733
#VU98772 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-45711
CWE-22 Medium
No
No
15.5 17.10.2024 SB2024101733
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
15.5 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU91290 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-28995
CWE-22 Critical
Available
Exploited
15.4.2 Hotfix 2 07.06.2024 SB2024060722
#VU89861 - Use After Free
CVE-2024-4741
CWE-416 Medium
No
No
15.5 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 87 more
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
15.5 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU89158 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-28072
CWE-22 Low
No
No
15.4.2 Hotfix 1 06.05.2024 SB2024050617
#VU88861 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-28073
CWE-22 Low
No
No
15.4.2 22.04.2024 SB2024042204
#VU83897 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-40053
CWE-79 Low
No
No
15.4.1 06.12.2023 SB2023120610
#VU80430 - Improper Authentication
CVE-2023-40060
CWE-287 Low
No
No
15.4 HF2 05.09.2023 SB2023090540
SB2023110108
#VU79825 - Improper Authentication
CVE-2023-35179
CWE-287 Low
No
No
15.4 HF1 22.08.2023 SB2023082223
#VU76909 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23841
CWE-200 Low
No
No
15.4 05.06.2023 SB2023060528
#VU70473 - Use of Hard-coded Cryptographic Key
CVE-2021-35252
CWE-321 Medium
No
No
15.3.2 21.12.2022 SB2022122169
#VU69538 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38106
CWE-79 Low
No
No
15.3.2 23.11.2022 SB2022112321
#VU63355 - Improper Access Control
CVE-2021-35249
CWE-284 Low
No
No
15.3.1 18.05.2022 SB2022051804


Showing elements 21 - 40 out of 63