Approved changes feed: RSS · Atom

cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSolarwinds (c393915a-764f-5773-8a18-db4a4d0f1496)
ProductServ U (6426b477-2e2f-566a-b683-47c7cc739116)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-28321 vulnerable 2026-07-29 00:37:43.101156 SolarWinds Serv-U Broken Access Control Vulnerability
CRITICAL (9.1)
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations.
Published: 2026-07-21T15:39:46.561Z
Updated: 2026-07-24T03:55:48.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28317 vulnerable 2026-07-29 00:37:43.100535 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
CRITICAL (9.1)
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires domain administrator access. The impact is lower in Windows deployments.
Published: 2026-07-21T15:39:30.473Z
Updated: 2026-07-24T03:55:47.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28316 vulnerable 2026-07-29 00:37:43.100201 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
CRITICAL (9.1)
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administrator with the ability to execute commands as the root user. This issue requires a domain account with administrator access. The impact is lower in Windows deployments.
Published: 2026-07-21T15:39:17.464Z
Updated: 2026-07-24T03:55:46.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28315 vulnerable 2026-07-29 00:37:43.099786 SolarWinds Serv-U Authenticated Stored Cross-site Scripting (XSS) Vulnerability
MEDIUM (6.2)
SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or information disclosure from an administrator account.
Published: 2026-07-21T15:39:04.982Z
Updated: 2026-07-21T17:44:05.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28314 vulnerable 2026-07-29 00:37:43.099535 SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability
CRITICAL (9.1)
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required. The impact is lower in Windows deployments.
Published: 2026-07-21T15:38:39.779Z
Updated: 2026-07-24T03:55:45.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28313 vulnerable 2026-07-29 00:37:43.099260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28312 vulnerable 2026-07-29 00:37:43.098959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28310 vulnerable 2026-07-29 00:37:43.098643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28309 vulnerable 2026-07-29 00:37:43.098475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28308 vulnerable 2026-07-29 00:37:43.098309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28307 vulnerable 2026-07-29 00:37:43.098026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28306 vulnerable 2026-07-29 00:37:43.097705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28305 vulnerable 2026-07-29 00:37:43.097455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28304 vulnerable 2026-07-29 00:37:43.097094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28302 vulnerable 2026-07-29 00:37:43.096761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28318 vulnerable 2026-06-08 07:55:15.161882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40549 vulnerable 2026-06-08 07:25:04.968243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40548 vulnerable 2026-06-08 07:25:04.962397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40547 vulnerable 2026-06-08 07:25:04.961767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40541 vulnerable 2026-06-08 07:25:04.956195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40540 vulnerable 2026-06-08 07:25:04.955820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40539 vulnerable 2026-06-08 07:25:04.955532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40538 vulnerable 2026-06-08 07:25:04.955135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45714 vulnerable 2026-06-08 06:48:08.944667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45712 vulnerable 2026-06-08 06:48:08.942427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45711 vulnerable 2026-06-08 06:48:08.942056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28995 vulnerable 2026-06-08 06:33:28.338771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28073 vulnerable 2026-06-08 06:33:26.387779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28072 vulnerable 2026-06-08 06:33:26.385701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40060 vulnerable 2026-06-08 06:09:41.133294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40053 vulnerable 2026-06-08 06:09:41.126001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35179 vulnerable 2026-06-08 06:06:26.787793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23841 vulnerable 2026-06-08 05:56:04.529331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3154 vulnerable 2026-06-08 05:33:50.902967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35252 vulnerable 2026-06-08 05:32:48.594626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35250 vulnerable 2026-06-08 05:32:48.590328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35249 vulnerable 2026-06-08 05:32:48.589856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35247 vulnerable 2026-06-08 05:32:48.587373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35245 vulnerable 2026-06-08 05:32:48.582242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35242 vulnerable 2026-06-08 05:32:48.578544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35223 vulnerable 2026-06-08 05:32:48.548687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35211 vulnerable 2026-06-08 05:32:48.527835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32604 vulnerable 2026-06-08 05:32:07.642762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25276 vulnerable 2026-06-08 05:30:40.592037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35482 vulnerable 2026-06-08 05:25:01.141709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35481 vulnerable 2026-06-08 05:25:01.141332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28001 vulnerable 2026-06-08 05:23:53.649234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27994 vulnerable 2026-06-08 05:23:53.634273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15576 vulnerable 2026-06-08 05:19:26.126989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15575 vulnerable 2026-06-08 05:19:26.126668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15574 vulnerable 2026-06-08 05:19:26.126316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15573 vulnerable 2026-06-08 05:19:26.125841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10241 vulnerable 2026-06-08 05:10:26.503384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10240 vulnerable 2026-06-08 05:10:26.502894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.