CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2019-13181
Medium (6.5) in solarwinds serv-u ftp server. EPSS 3.2% chance of exploitation in the next 30 days.
A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.
Severity
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWE
- CWE-1236
- Published
- Modified
- Record from
- the NVD, synced
Affected
- solarwinds:serv-u_ftp_server
References
- http://packetstormsecurity.com/files/155673/Serv-U-FTP-Server-15.1.7-CSV-Injection.html
- http://seclists.org/fulldisclosure/2019/Dec/33
- https://www.themissinglink.com.au/security-advisories-cve-2019-13181
- http://packetstormsecurity.com/files/155673/Serv-U-FTP-Server-15.1.7-CSV-Injection.html
- http://seclists.org/fulldisclosure/2019/Dec/33