SolarWinds FTP Voyager vulnerabilities

2 CVEs affecting SolarWinds FTP Voyager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-25252, published 2026-04-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-6803, published 2017-03-20. High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication…
CVE-2018-25252, published 2026-04-04. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can…