CVE-2021-35245: SolarWinds Serv-U

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

Affected products

• SolarWinds Serv-U: before 15.2.4 (fixed in 15.2.4); version 15.2.4 only; version 15.2.5 only

Published 2021-12-06. Last modified 2026-06-17.