Skip to content
OpenAdvisories
Low WID-SEC-2025-0796 1 CVE

SolarWinds Serv-U: Schwachstelle ermöglicht Cross-Site Scripting

Published Apr 14, 2025 · Updated Apr 14, 2025 · de-DE

Vendor: SolarWinds Product: Serv-U Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Serv-U ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

SolarWinds Serv-U ist eine FTP-Server Software.

Vulnerabilities 1

  • Low 2.6
    CVE-2024-45712 Public exploit

    SolarWinds Serv-U Client-Side Cross-Site Scripting Vulnerability

    SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.

    SolarWinds Serv-U

Revision history

  1. #1

    Initiale Fassung

References