Firetruck

CVE-2024-28995

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
serv-usolarwinds / serv-u>= 0, <= 15.4.2_hf_1affected
SolarWinds Serv-USolarWinds / SolarWinds Serv-U15.4.2 HF 1 and previous versionsaffected