CVE-2022-38106: SolarWinds Serv-U

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function.

Affected products

• SolarWinds Serv-U: version 15.3.0 only; version 15.3.1 only

Published 2022-12-16. Last modified 2026-06-17.