CVE-2019-13181

MEDIUM

SolarWinds Serv-U FTP Server <15.1.7 - SQL Injection

Title source: llm

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.

Core 3

Core References

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

Third Party Advisory x_refsource_misc

Third Party Advisory, VDB Entry x_refsource_misc

CVSS v3 6.5

EPSS 0.0323

EPSS Percentile 86.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-1236

Status published

Products (1)

solarwinds/serv-u_ftp_server 15.1.7

Published Dec 16, 2019

Tracked Since Feb 18, 2026