CVE-2019-13182

MEDIUM

SolarWinds Serv-U FTP Server 15.1.7 - Stored Cross-Site Scripting

Title source: llm

A stored cross-site scripting (XSS) vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7.

Core 3

Core References

Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

Third Party Advisory x_refsource_misc

Third Party Advisory, VDB Entry x_refsource_misc

CVSS v3 5.4

EPSS 0.0240

EPSS Percentile 85.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

solarwinds/serv-u_ftp_server 15.1.7

Published Dec 16, 2019

Tracked Since Feb 18, 2026