Back to CVE Browser

CVE-2024-28995

🔥 Known Exploited (CISA KEV)HIGH

8.6

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-06-06

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.

Affected Platforms (CPE)

📦

Solarwinds

Serv U

< 15.4.2= 15.4.2

References & Advisories

🔗 https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995

🔗 https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28995

Related Vulnerabilities

CVE-2026-642987.1

In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC ...

CVE-2026-442105.8

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform...

CVE-2026-648232.1

Home Assistant Core before 2026.5.4 contains a cross-site scripting vulnerability in the Shelly integration's async_get_media_imag...

CVE-2026-283219.1

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can t...