CISA known exploited vulnerability

CVE-2021-35247

SolarWinds Serv-U Improper Input Validation Vulnerability

SOURCE FACT

SolarWinds · Serv-U

SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-35247

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2021-35247

SolarWinds · Serv-U

Required action

CISA notes

Could this product be present?