Description
SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 4 Feb 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.