How many CVEs does SolarWinds serv-u file server have?

SolarWinds serv-u file server has 21 published CVE records since 2001.

How many SolarWinds serv-u file server CVEs are in CISA KEV?

None of SolarWinds serv-u file server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for SolarWinds serv-u file server vulnerabilities?

Yes — 14 of SolarWinds serv-u file server's CVEs have a known public exploit.

Which versions of SolarWinds serv-u file server are affected?

97 distinct SolarWinds serv-u file server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SolarWinds serv-u file server CVEs?

SolarWinds serv-u file server's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How many critical SolarWinds serv-u file server vulnerabilities are there?

SolarWinds serv-u file server has 5 critical and 3 high-severity CVEs.

What is the average severity of SolarWinds serv-u file server CVEs?

The average CVSS base score across SolarWinds serv-u file server's scored CVEs is 6.4.

SolarWinds serv-u file server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every SolarWinds serv-u file server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.0.0.16 <= v <= 3.0.0.169 CVEs
4.0.0.4 <= v <= 4.0.0.49 CVEs
4.1.0.0 <= v <= 4.1.0.09 CVEs
7.0.0.1 <= v <= 7.0.0.19 CVEs
7.0.0.2 <= v <= 7.0.0.29 CVEs
7.0.0.3 <= v <= 7.0.0.39 CVEs
7.0.0.4 <= v <= 7.0.0.49 CVEs
7.1.0.0 <= v <= 7.1.0.09 CVEs
7.1.0.1 <= v <= 7.1.0.19 CVEs
7.1.0.2 <= v <= 7.1.0.29 CVEs
7.2.0.0 <= v <= 7.2.0.09 CVEs
3.0.0.17 <= v <= 3.0.0.178 CVEs
3.1.0.0 <= v <= 3.1.0.08 CVEs
7.2.0.1 <= v <= 7.2.0.18 CVEs
7.3.0.0 <= v <= 7.3.0.08 CVEs
7.3.0.1 <= v <= 7.3.0.18 CVEs
7.3.0.2 <= v <= 7.3.0.28 CVEs
3.1.0.1 <= v <= 3.1.0.17 CVEs
3.1.0.3 <= v <= 3.1.0.37 CVEs
4.1.0.3 <= v <= 4.1.0.37 CVEs
5.0.0.0 <= v <= 5.0.0.06 CVEs
7.4.0.0 <= v <= 7.4.0.06 CVEs
7.4.0.1 <= v <= 7.4.0.16 CVEs
5.0.0.4 <= v <= 5.0.0.45 CVEs
5.0.0.9 <= v <= 5.0.0.95 CVEs
5.0.0.11 <= v <= 5.0.0.114 CVEs
5.1.0.0 <= v <= 5.1.0.04 CVEs
5.2.0.0 <= v <= 5.2.0.04 CVEs
5.2.0.1 <= v <= 5.2.0.14 CVEs
8.0.0.1 <= v <= 8.0.0.14 CVEs
8.0.0.2 <= v <= 8.0.0.24 CVEs
8.0.0.4 <= v <= 8.0.0.44 CVEs
8.0.0.5 <= v <= 8.0.0.54 CVEs
8.0.0.7 <= v <= 8.0.0.74 CVEs
8.1.0.1 <= v <= 8.1.0.14 CVEs
8.1.0.3 <= v <= 8.1.0.34 CVEs
8.2.0.0 <= v <= 8.2.0.04 CVEs
8.2.0.1 <= v <= 8.2.0.14 CVEs
8.2.0.3 <= v <= 8.2.0.34 CVEs
6.0.0.0 <= v <= 6.0.0.03 CVEs
6.0.0.1 <= v <= 6.0.0.13 CVEs
6.0.0.2 <= v <= 6.0.0.23 CVEs
6.1.0.0 <= v <= 6.1.0.03 CVEs
9.0.0.1 <= v <= 9.0.0.13 CVEs
9.0.0.3 <= v <= 9.0.0.33 CVEs
9.0.0.5 <= v <= 9.0.0.53 CVEs
9.1.0.0 <= v <= 9.1.0.03 CVEs
6.1.0.1 <= v <= 6.1.0.12 CVEs
6.1.0.4 <= v <= 6.1.0.42 CVEs
6.1.0.5 <= v <= 6.1.0.52 CVEs
6.2.0.0 <= v <= 6.2.0.02 CVEs
6.2.0.1 <= v <= 6.2.0.12 CVEs
6.3.0.0 <= v <= 6.3.0.02 CVEs
6.3.0.1 <= v <= 6.3.0.12 CVEs
6.4.0.0 <= v <= 6.4.0.02 CVEs
6.4.0.1 <= v <= 6.4.0.12 CVEs
6.4.0.2 <= v <= 6.4.0.22 CVEs
6.4.0.3 <= v <= 6.4.0.32 CVEs
6.4.0.4 <= v <= 6.4.0.42 CVEs
6.4.0.5 <= v <= 6.4.0.52 CVEs
6.4.0.6 <= v <= 6.4.0.62 CVEs
9.1.0.2 <= v <= 9.1.0.22 CVEs
< 15.21 CVE
<= 11.1.0.31 CVE
<= 4.1.0.31 CVE
<= 5.0.0.01 CVE
<= 5.0.0.111 CVE
<= 5.0.0.41 CVE
<= 6.1.0.11 CVE
>= 15.3.01 CVE
10.0.0.2 <= v <= 10.0.0.21 CVE
10.0.0.3 <= v <= 10.0.0.31 CVE
10.0.0.5 <= v <= 10.0.0.51 CVE
10.0.0.7 <= v <= 10.0.0.71 CVE
10.1.0.0 <= v <= 10.1.0.01 CVE
10.1.0.1 <= v <= 10.1.0.11 CVE
10.2.0.0 <= v <= 10.2.0.01 CVE
10.2.0.2 <= v <= 10.2.0.21 CVE
10.3.0.1 <= v <= 10.3.0.11 CVE
10.4.0.0 <= v <= 10.4.0.01 CVE
10.5.0.11 <= v <= 10.5.0.111 CVE
10.5.0.14 <= v <= 10.5.0.141 CVE
10.5.0.16 <= v <= 10.5.0.161 CVE
10.5.0.19 <= v <= 10.5.0.191 CVE
10.5.0.21 <= v <= 10.5.0.211 CVE
10.5.0.24 <= v <= 10.5.0.241 CVE
10.5.0.4 <= v <= 10.5.0.41 CVE
10.5.0.6 <= v <= 10.5.0.61 CVE
11.0.0.0 <= v <= 11.0.0.01 CVE
11.0.0.2 <= v <= 11.0.0.21 CVE
11.0.0.4 <= v <= 11.0.0.41 CVE
11.1.0.5 <= v <= 11.1.0.51 CVE
9.2.0.1 <= v <= 9.2.0.11 CVE
9.3.0.1 <= v <= 9.3.0.11 CVE
9.4.0.0 <= v <= 9.4.0.01 CVE
9.4.0.2 <= v <= 9.4.0.21 CVE

Fixed in

15.21 CVE

Find a version

21 CVEs

Sort

Medium vulnerability · 2022-12-16
CVE-2022-38106
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.7% (54th pct)2022-12-16
Medium vulnerability · 2021-05-05
CVE-2021-25179
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.4% (72th pct)2021-05-05
Critical vulnerability · 2011-12-14
CVE-2011-4800
Public exploit
CWE-22
Critical · CVSS 9.0
EPSS 7.3% (94th pct)2011-12-14
Medium vulnerability · 2010-04-27
CVE-2009-4815CWE-22
Medium · CVSS 4.0
EPSS 2.9% (87th pct)2010-04-27
Critical vulnerability · 2009-11-20
CVE-2009-4006
Public exploit
CWE-119
Critical · CVSS 10.0
EPSS 82.9% (100th pct)2009-11-20
Medium vulnerability · 2009-10-09
CVE-2009-3655
Medium · CVSS 5.0
EPSS 4.0% (90th pct)2009-10-09
High vulnerability · 2009-03-20
CVE-2009-1031
Public exploit
CWE-22
High · CVSS 7.8
EPSS 11.2% (96th pct)2009-03-20
Medium vulnerability · 2009-03-19
CVE-2009-0967
Public exploit
CWE-399
Medium · CVSS 4.0
EPSS 7.0% (94th pct)2009-03-19
Critical vulnerability · 2008-10-08
CVE-2008-4501
Public exploit
CWE-22
Critical · CVSS 9.0
EPSS 10.7% (96th pct)2008-10-08
Medium vulnerability · 2008-10-08
CVE-2008-4500
Public exploit
CWE-20
Medium · CVSS 4.0
EPSS 10.3% (96th pct)2008-10-08
Medium vulnerability · 2008-08-20
CVE-2008-3731
Medium · CVSS 4.0
EPSS 2.1% (81th pct)2008-08-20
Medium vulnerability · 2007-10-31
CVE-2002-2393CWE-20
Medium · CVSS 5.0
EPSS 2.6% (85th pct)2007-10-31
Medium vulnerability · 2005-11-02
CVE-2005-3467CWE-20
Medium · CVSS 5.0
EPSS 2.4% (84th pct)2005-11-02
Medium vulnerability · 2005-10-25
CVE-2004-2533
Public exploit
CWE-20
Medium · CVSS 5.0
EPSS 3.0% (87th pct)2005-10-25
Critical vulnerability · 2005-10-25
CVE-2004-2532
Public exploit
CWE-255
Critical · CVSS 10.0
EPSS 15.3% (97th pct)2005-10-25
High vulnerability · 2005-05-27
CVE-2004-2111
Public exploit
CWE-119
High · CVSS 8.5
EPSS 86.9% (100th pct)2005-05-27
Medium vulnerability · 2005-05-10
CVE-2004-1992
Public exploit
CWE-119
Medium · CVSS 5.0
EPSS 11.2% (96th pct)2005-05-10
High vulnerability · 2005-04-21
CVE-2001-1463
Public exploit
CWE-310
High · CVSS 7.5
EPSS 3.2% (88th pct)2005-04-21
Medium vulnerability · 2005-02-20
CVE-2004-1675
Public exploit
CWE-20
Medium · CVSS 5.0
EPSS 12.4% (96th pct)2005-02-20
Critical vulnerability · 2004-03-18
CVE-2004-0330
Public exploit
CWE-119
Critical · CVSS 10.0
EPSS 85.5% (100th pct)2004-03-18
Medium vulnerability · 2001-05-07
CVE-2001-0054
Public exploit
CWE-22
Medium · CVSS 5.0
EPSS 12.0% (96th pct)2001-05-07

SolarWinds serv-u file server Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other SolarWinds products

Frequently asked questions

References

Track SolarWinds serv-u file server vulnerabilities