CVE-2020-22428
Published May 5, 2021SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
Vendor/product archive
2 CVEs tagged to solarwinds / serv-u_mft_server — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.
SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.