SolarWinds Inc. Serv-U File Server

Name: SolarWinds Inc. Serv-U File Server
Brand: SolarWinds Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical3high2medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-28995US	high7.5OT critical	99.6% (100th)	KEV	no fix	2024-06-06	≤ 15.4.2 HF 2
CVE-2021-35211US	critical10.0OT critical	91.2% (100th)	KEV	no fix	2021-07-14	≤ 15.2.3 HF2
CVE-2021-35247US	medium5.3OT critical	3.45% (89th)	KEV	no fix	2022-01-10	≤ 15.3
CVE-2024-45712US	medium5.4	0.38% (32nd)	Exploit	no fix	2025-04-15	≤ 15.5.1
CVE-2024-45711US	high8.8	6.29% (94th)	—	no fix	2024-10-16	≤ 15.4.2
CVE-2025-40549US	—	1.13% (66th)	—	no fix	2025-11-18	≤ 15.5.3
CVE-2024-28073US	high7.2	1.12% (66th)	—	no fix	2024-04-17	≤ 15.4.2
CVE-2025-40547US	—	0.97% (62nd)	—	no fix	2025-11-18	≤ 15.5.3
CVE-2025-40548US	—	0.76% (55th)	—	no fix	2025-11-18	≤ 15.5.3

showing 9 of 14

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-668Exposure of Resource to Wrong Sphere1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.