Vulnerabilities > Solarwinds > Serv U > 15.1.7

DATE CVE VULNERABILITY TITLE RISK
2020-07-07 CVE-2020-15576 Unspecified vulnerability in Solarwinds Serv-U
SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.
network
low complexity
solarwinds
7.5
2020-07-07 CVE-2020-15575 Cross-site Scripting vulnerability in Solarwinds Serv-U
SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194.
network
low complexity
solarwinds CWE-79
6.1
2020-07-07 CVE-2020-15574 Unspecified vulnerability in Solarwinds Serv-U
SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.
network
low complexity
solarwinds
7.5
2020-07-07 CVE-2020-15573 Cross-site Scripting vulnerability in Solarwinds Serv-U
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.
network
low complexity
solarwinds CWE-79
6.1