coldbraid

CVE-2021-35247 SolarWinds Serv-U

SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.

CVSS
not scored

CWE-20

On CISA’s exploited list

SolarWinds Serv-U Improper Input Validation Vulnerability

Added
2022-01-21
Federal patch deadline
2022-02-04
Ransomware use
not known