Vulnerabilities > Solarwinds > Serv U > 15.3.0

DATE CVE VULNERABILITY TITLE RISK
2023-06-15 CVE-2023-23841 Cleartext Transmission of Sensitive Information vulnerability in Solarwinds Serv-U
SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.? Part of the URL of the request discloses sensitive data. 
network
low complexity
solarwinds CWE-319
7.5
2022-12-16 CVE-2022-38106 Cross-site Scripting vulnerability in Solarwinds Serv-U 15.3.0/15.3.1
This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1.
network
low complexity
solarwinds CWE-79
5.4