CVE

CVE-2024-28995

SolarWinds Serv-U Path Traversal Vulnerability

SolarWinds · Serv-U

Date added (CISA)

2024-07-17

Remediation due

2024-08-07

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.