CVE security advisories and vulnerability history for serv-u by solarwinds.
Last updated
solarwinds serv-u has 40 published CVE records since 2018, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting solarwinds serv-u, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include Linux, Windows.
How the CVSS severity of solarwinds serv-u's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
13 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
4
4 of solarwinds serv-u's CVEs are confirmed exploited in the wild.
Public exploits
6
6 of solarwinds serv-u's CVEs have a known public exploit available.
Browse every solarwinds serv-u version named in a CVE, then pick one to see only the CVEs that affect it.
40 CVEs
Added to CISA KEV 2026-06-05
Added to CISA KEV 2024-07-17
Added to CISA KEV 2022-01-21
Added to CISA KEV 2021-11-03
Showing 30 of 40
The CWE weakness categories most often found in solarwinds serv-u CVEs. Follow any weakness for its full explanation.
How many solarwinds serv-u CVEs were published each year.
Browse vulnerabilities for other products by solarwinds.
Common questions about solarwinds serv-u vulnerabilities.
solarwinds serv-u has 40 published CVE records since 2018.
Yes — 4 of solarwinds serv-u's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 6 of solarwinds serv-u's CVEs have a known public exploit.
21 distinct solarwinds serv-u versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
solarwinds serv-u's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-284 (Improper Access Control), CWE-704 (Incorrect Type Conversion or Cast), CWE-20 (Improper Input Validation).
solarwinds serv-u has 9 critical and 11 high-severity CVEs.
The average CVSS base score across solarwinds serv-u's scored CVEs is 7.5.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new solarwinds serv-u vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
