Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2023-40053

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

Published: Dec 6, 2023
Updated: May 10, 2024
CVE: CVE-2023-40053
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5
AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
solarwinds / serv-u	15.4.0	15.4.0.x
solarwinds / serv-u	15.4.0-hotfix1	15.4.0-hotfix1.x
solarwinds / serv-u	15.4.0-hotfix2	15.4.0-hotfix2.x

https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-4-1_release_notes.htm
https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40053

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo