Vulnerabilities > Solarwinds > Serv U > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-07-07 CVE-2020-15573 Cross-site Scripting vulnerability in Solarwinds Serv-U
SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.
network
low complexity
solarwinds CWE-79
6.1
6.1
2018-05-16 CVE-2018-10241 NULL Pointer Dereference vulnerability in Solarwinds Serv-U
A denial of service vulnerability in SolarWinds Serv-U before 15.1.6 HFv1 allows an authenticated user to crash the application (with a NULL pointer dereference) via a specially crafted URL beginning with the /Web%20Client/ substring.
network
low complexity
solarwinds CWE-476
6.5
6.5