Known vulnerabilities in Serv-U FTP Server - page 3

Vendor: SolarWinds
Software CPE: cpe:2.3:a:solarwinds:serv-u_ftp_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 8
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Serv-U FTP Server Serv-U FTP Server is affected by 63 known vulnerabilities: 2 critical, 9 high, 14 medium, 38 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60973 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-35250
CWE-22 Medium
Available
No
15.3 HF 1 03.03.2022 SB2022030306
#VU59659 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2021-35247
CWE-90 Low
No
Exploited
15.3 17.01.2022 SB2022011720
#VU58749 - Permissions, Privileges, and Access Controls
CVE-2021-35245
CWE-264 Low
No
No
15.2.5 09.12.2021 SB2021120902
#VU58748 - Cross-Site Request Forgery (CSRF)
CVE-2021-35242
CWE-352 Medium
No
No
15.2.5 09.12.2021 SB2021120902
#VU54677 - Memory corruption
CVE-2021-35211
CWE-119 Critical
Available
Exploited
15.2.3 HF2 13.07.2021 SB2021071315
#VU54584 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32604
CWE-79 Low
No
No
15.2.3 07.07.2021 SB2021070706
#VU50668 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
15.2.1 12.02.2021 SB2020071912
#VU50667 - Improper input validation
CVE-2020-15543
CWE-20 Medium
No
No
15.2.1 12.02.2021 SB2020071912
#VU50666 - Permissions, Privileges, and Access Controls
CVE-2020-15542
CWE-264 Medium
No
No
15.2.1 12.02.2021 SB2020071912
#VU50665 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-15541
CWE-78 High
No
No
15.2.1 12.02.2021 SB2020071912
#VU50296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28001
CWE-79 Low
Available
No
15.2.2 03.02.2021 SB2021020327
#VU50295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-27994
CWE-22 Medium
Available
No
15.2.2 03.02.2021 SB2021020327
#VU50294 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-35481
CWE-94 High
No
No
15.2.2 03.02.2021 SB2021020327
#VU50293 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35482
CWE-79 Low
No
No
15.2.2 03.02.2021 SB2021020327
#VU50292 - Incorrect Default Permissions
CVE-2021-25276
CWE-276 Low
No
No
15.2.2 03.02.2021 SB2021020327
#VU34957 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-19829
CWE-79 Low
No
No
- 18.12.2019 SB2019121627
#VU34965 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-13181
CWE-74 Medium
No
No
- 16.12.2019 SB2019121627
#VU34966 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-13182
CWE-79 Low
No
No
- 16.12.2019 SB2019121627
#VU20297 - Permissions, Privileges, and Access Controls
CVE-2019-12181
CWE-264 Low
Available
No
15.1.7 19.08.2019 SB2019061707
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
15.2.1 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 41 - 60 out of 63