FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-35481

SolarWinds Serv-U before 15.2.2 allows Unauthenticated Macro Injection.

No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:1.30%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
solarwinds serv-u all

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

EPSS Score
1.300%
GitHub Advisory
GHSA-4rqr-r9fv-8h9h ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2020-12-16T00:00:00
Published2021-02-03T15:47:59
Last Updated2024-08-04T17:02:07

Related Intelligence

Related CVEs
CVE-2009-4873 CVSS 10.0 — Stack-based buffer overflow in the HTTP server in Rhino Software Serv-…
CVE-2026-28321 CVSS 9.1 — SolarWinds Serv-U is affected by a broken access control vulnerability…
CVE-2026-28317 CVSS 9.1 — SolarWinds Serv-U is affected by an insecure direct object reference (…
CVE-2026-28316 CVSS 9.1 — SolarWinds Serv-U is affected by an insecure direct object reference (…
CVE-2026-28314 CVSS 9.1 — SolarWinds Serv-U is affected by an insecure direct object reference v…
LINK COPIED TO CLIPBOARD