CVE-2021-35250: SolarWinds Serv-U

High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days.

A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1.

Affected products

• SolarWinds Serv-U: version 15.3 only

Published 2022-04-25. Last modified 2026-06-17.