target entity

Serv-U

4 source-linked records in the current knowledge graph.

Jun 5, 2026high

CVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability

SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST requests using the Content-Encoding: deflate header to crash the Serv-U service without authentication. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2026-28318EPSS 10.7%Serv-USolarWinds

CISA KEV ↗ · unattributed attribution

Jul 17, 2024high

CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability

SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-28995EPSS 99.6%Serv-USolarWinds

CISA KEV ↗ · unattributed attribution

Jan 21, 2022high

CVE-2021-35247: SolarWinds Serv-U Improper Input Validation Vulnerability

SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization. Required action: Apply updates per vendor instructions.

CVE-2021-35247EPSS 3.4%Serv-USolarWinds

CISA KEV ↗ · unattributed attribution

Nov 3, 2021high

CVE-2021-35211: SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2021-35211EPSS 91.2%Serv-USolarWinds

CISA KEV ↗ · unattributed attribution