CVE-2020-28001

Description

References

• packetstormsecurity.com/files/161400/SolarWinds-Serv-U-FTP-Server-15.2.1-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2021/Feb/37 · Exploit
• documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-2_release_notes.htm · Release Notes
• themissinglink.com.au/security-advisories-cve-2020-28001 · Third Party Advisory

Autres vulnérabilités de serv-u

• CVE-2026-28321CRITIQUE 9.1SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be use…
• CVE-2026-28317CRITIQUE 9.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue …
• CVE-2026-28316CRITIQUE 9.1SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system …
• CVE-2026-28315MOYENNE 6.2SolarWinds Serv-U was found to be affected by a stored cross-site scripting vulnerability that could lead to session hijacking or informatio…
• CVE-2026-28314CRITIQUE 9.1SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is…