CVE-2018-19934: SolarWinds Serv-U FTP Server

Medium severity, CVSS 4.8. EPSS: 5.4% chance of exploitation in the next 30 days.

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting (XSS) in the Web management interface via URL path and HTTP POST parameter.

Affected products

• SolarWinds Serv-U FTP Server: version 15.1.6.25 only

Published 2019-03-21. Last modified 2026-06-17.