VulnSocial

CVE-2021-35247Disclosure(solarwinds / serv-u)

LOWCVSS 5.3 · MEDIUMCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.

solarwinds CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-02-04. Apply updates per vendor instructions.

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • serv-u

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
solarwinds
Products
serv-u

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-03: 1Technical Details · 2026-02-03: 102-03
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • DailyCVE@dailycve
    Disclosure

    🔴 #SolarWinds Web Help Desk, Untrusted Deserialization RCE, #CVE-2021-35247 (Critical) https://dailycve.com/solarwinds-web-help-desk-untrusted-deserialization-rce-cve-2021-35247-critical/

    Post summary

    The post announces the SolarWinds Web Help Desk untrusted deserialization RCE CVE‑2021‑35247, noting its critical severity, and links to a dailyCVE article for more information, but provides no PoC, exploitation details, or mitigation steps.

    0000039
    162 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsolarwindsserv-u---

Explore more

Back to dashboardsolarwinds CVEsserv-u vulnerabilities