Lucene search
SolarWindsCVE-2023-40053HistoryDec 06, 2023 - 4:15 a.m.
CVE-2023-40053
2023-12-0604:15:07
CWE-20
SolarWinds
web.nvd.nist.gov
29
cve-2023-40053
serv-u 15.4
vulnerability
file share
authenticated actor
nvd
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
AI Score
5
Confidence
High
EPSS
0
Percentile
14.0%
A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.
Affected configurations
Node
solarwindsserv-uMatch15.4.0-
ORsolarwindsserv-uMatch15.4.0hotfix1
ORsolarwindsserv-uMatch15.4.0hotfix2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| solarwinds | serv-u | 15.4.0 | cpe:2.3:a:solarwinds:serv-u:15.4.0:-:*:*:*:*:*:* |
| solarwinds | serv-u | 15.4.0 | cpe:2.3:a:solarwinds:serv-u:15.4.0:hotfix1:*:*:*:*:*:* |
| solarwinds | serv-u | 15.4.0 | cpe:2.3:a:solarwinds:serv-u:15.4.0:hotfix2:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Serv-U",
"vendor": "SolarWinds",
"versions": [
{
"status": "affected",
"version": "15.4 and previous versions"
}
]
}
]Related
cvelist
cvelist
CVE-2023-40053 HTML injection Vulnerability in Serv-U 15.4
2023-12-06 03:23:59
nessus
nessus
SolarWinds Serv-U 15.4 < 15.4.1
2023-12-05 00:00:00
prion
prion
Design/Logic Flaw
2023-12-06 04:15:00
nvd
nvd
CVE-2023-40053
2023-12-06 04:15:07
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
AI Score
5
Confidence
High
EPSS
0
Percentile
14.0%
Related for CVE-2023-40053