← All advisories

Critical severity9.8NVD Advisory· Published Feb 3, 2021· Updated Jun 17, 2026

CVE-2020-35481

CVE-2020-35481

Description

SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.

Affected products

3

SolarWinds/Serv-U MFT3 versions
cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*range: <15.2.2
- (no CPE)
- (no CPE)range: <15.2.2

Patches

Vulnerability mechanics

References

1

documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-2-2_release_notes.htmnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.