CVE

CVE-2021-35247

SolarWinds Serv-U Improper Input Validation Vulnerability

SolarWinds · Serv-U

Date added (CISA)

2022-01-21

Remediation due

2022-02-04

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.

Source: NVD ↗ · CISA KEV Catalog ↗