Solarwinds FTP Voyager 16.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:ftp_voyager:16.2.0:*:*:*:*:*:*:*
part: a version: 16.2.0 update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | Ftp Voyager (abf5b26b-9210-5cec-b01a-b0203cad6f1a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25252 |
vulnerable | 2026-06-08 05:11:29.676378 |
FTP Voyager 16.2.0 Denial of Service via Malformed Site Profile
MEDIUM (6.2)
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP field to trigger a buffer overflow that crashes the FTP Voyager process.
Published: 2026-04-04T13:51:16.440Z
Updated: 2026-04-06T16:40:48.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6803 |
vulnerable | 2026-06-08 05:09:54.987547 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin password, (2) terminate the scheduler, or (3) possibly execute arbitrary commands via crafted requests to Admin/XML/Result.xml.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-05T15:41:17.515Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.