{"cvss":8.6,"datePublished":"2024-07-17","dateUpdated":"2024-07-17","description":"SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.","dueDate":"2024-08-07","id":"CVE-2024-28995","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995; https://nvd.nist.gov/vuln/detail/CVE-2024-28995","product":"Serv-U","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"SolarWinds Serv-U Path Traversal Vulnerability ","vendor":"SolarWinds"}