{"cvss":4.3,"datePublished":"2022-01-21","dateUpdated":"2022-01-21","description":"SolarWinds Serv-U versions 15.2.5 and earlier contain an improper input validation vulnerability that allows attackers to build and send queries without sanitization.","dueDate":"2022-02-04","id":"CVE-2021-35247","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35247","product":"Serv-U","requiredAction":"Apply updates per vendor instructions.","severity":"MEDIUM","source":"cisa_known_exploited","title":"SolarWinds Serv-U Improper Input Validation Vulnerability","vendor":"SolarWinds"}