vulnerability
SolarWinds Serv-U: CVE-2022-38106: Cross-Site Scripting Vulnerability in Serv-U Web Client
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:M/C:C/I:P/A:P) | Dec 15, 2022 | Aug 1, 2025 | Aug 1, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:M/C:C/I:P/A:P)
Published
Dec 15, 2022
Added
Aug 1, 2025
Modified
Aug 1, 2025
Description
Cross-site scripting vulnerability in Serv-U versions 15.3.0 to 15.3.1 The vulnerability happens when a non-privileged user creates a new folder in Serv-U web client option and enters the payload.
Solution
solarwinds-serv-u-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.