CVE-2023-23841: SolarWinds Serv-U

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.  Part of the URL of the request discloses sensitive data.

Affected products

• SolarWinds Serv-U: before 15.4 (fixed in 15.4)

Published 2023-06-15. Last modified 2026-06-17.