solarwinds serv-u file server

Name: solarwinds serv-u file server
Brand: solarwinds

productUS

cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical8high12medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-2111US	high8.5	86.9% (100th)	Exploit	no fix	2004-12-31	8 versions
CVE-2004-0330US	high10.0	85.5% (100th)	Exploit	no fix	2004-11-23	9 versions
CVE-2009-4006US	high10.0	82.9% (100th)	Exploit	no fix	2009-11-20	28 versions
CVE-2004-2532US	high10.0	15.3% (97th)	Exploit	no fix	2004-12-31	12 versions
CVE-2004-1675US	medium5.0	12.4% (96th)	Exploit	no fix	2004-09-11	10 versions
CVE-2001-0054US	medium5.0	12.0% (96th)	Exploit	no fix	2001-02-16	= 3.0.0.16
CVE-2004-1992US	medium5.0	11.2% (96th)	Exploit	no fix	2004-04-20	10 versions
CVE-2009-1031US	high7.8	11.2% (96th)	Exploit	no fix	2009-03-20	14 versions
CVE-2008-4501US	high9.0	10.7% (96th)	Exploit	no fix	2008-10-09	12 versions
CVE-2008-4500US	medium4.0	10.3% (96th)	Exploit	no fix	2008-10-09	12 versions
CVE-2011-4800US	high9.0	7.34% (94th)	Exploit	no fix	2011-12-14	89 versions
CVE-2009-0967US	medium4.0	7.03% (94th)	Exploit	no fix	2009-03-19	14 versions
CVE-2009-3655US	medium5.0	4.01% (91st)	—	no fix	2009-10-09	24 versions
CVE-2001-1463US	high7.5	3.16% (88th)	—	no fix	2001-11-19	2 versions
CVE-2004-2533US	medium5.0	3.05% (87th)	—	no fix	2004-12-31	= 4.1.0.0
CVE-2009-4815US	medium4.0	2.89% (87th)	—	no fix	2010-04-27	62 versions
CVE-2002-2393US	medium5.0	2.61% (85th)	—	no fix	2002-12-31	2 versions
CVE-2005-3467US	medium5.0	2.41% (84th)	—	no fix	2005-11-02	20 versions
CVE-2008-3731US	medium4.0	2.11% (82nd)	—	no fix	2008-08-20	8 versions
CVE-2021-25179US	medium6.1	1.39% (72nd)	—	15.2	2021-05-05	< 15.2

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-255CWE-2551 CVEs
CWE-310CWE-3101 CVEs
CWE-399CWE-3991 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.