SolarWinds Serv-U Managed File Transfer Server: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-45711

  SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability

  SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environmen…

  SolarWinds Serv-U
  Oct 16, 2024
• Medium 4.8
  CVE-2024-45714

  SolarWinds Serv-U Stored XSS Vulnerability

  Application is vulnerable to Cross Site Scripting (XSS) an authenticated attacker with users’ permissions can modify a variable with a payload.

  SolarWinds Serv-U
  Oct 16, 2024

Revision history

1. 2024-10-15 #1

   Initiale Fassung

References

• Solarwinds Security Advisory vom 2024-10-15
  https://www.solarwinds.com/trust-center/security-advisories/cve-2024-45711
• Solarwinds Security Advisory vom 2024-10-15
  https://www.solarwinds.com/trust-center/security-advisories/cve-2024-45714