| Package | Affected versions | Patched versions |
|---|---|---|
| serv-u | < 15.2.2 | 15.2.2 |
An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free