Vulnerabilities > Solarwinds > Serv U > 15.1.1

DATE CVE VULNERABILITY TITLE RISK
2023-06-15 CVE-2023-23841 Cleartext Transmission of Sensitive Information vulnerability in Solarwinds Serv-U
SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data. 
network
low complexity
solarwinds CWE-319
7.5
2022-12-16 CVE-2021-35252 Improper Authentication vulnerability in Solarwinds Serv-U
Common encryption key appears to be used across all deployed instances of Serv-U FTP Server.
network
low complexity
solarwinds CWE-287
7.5
2021-07-14 CVE-2021-35211 Out-of-bounds Write vulnerability in Solarwinds Serv-U
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability.
network
low complexity
solarwinds CWE-787
critical
10.0