Serv U File Server
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Serv U File Server (5c0d0316-6624-5b58-b393-cc2b07d1d78e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-38106 |
vulnerable | 2026-06-08 05:47:15.788045 |
Cross-Site Scripting Vulnerability in Serv-U Web Client
MEDIUM (5.4)
This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.
Published: 2022-12-16T00:00:00.000Z
Updated: 2024-08-03T10:45:52.842Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25179 |
vulnerable | 2026-06-08 05:30:40.174746 |
Details available
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.
Published: 2021-05-05T02:40:13.000Z
Updated: 2024-08-03T19:56:10.539Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4800 |
vulnerable | 2026-06-08 04:59:32.969504 |
Details available
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get commands.
Published: 2011-12-14T00:00:00.000Z
Updated: 2024-09-16T23:01:04.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3467 |
vulnerable | 2026-06-08 04:48:40.800998 |
Details available
Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of "~" in a pathname, and (3) memory consumption of the daemon. NOTE: it is not clear whether items (2) and above are vulnerabilities.
Published: 2005-11-02T23:00:00.000Z
Updated: 2024-08-07T23:10:08.932Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2532 |
vulnerable | 2026-06-08 04:48:10.020793 |
Details available
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command.
Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-08T01:29:13.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2111 |
vulnerable | 2026-06-08 04:48:08.548506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1992 |
vulnerable | 2026-06-08 04:48:08.200130 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0330 |
vulnerable | 2026-06-08 04:47:49.409460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.