CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-01-10
SolarWinds Serv-U LDAP Authentication Input Validation Vulnerability (CVE-2021-35247) Technical Advisory
[Affected Scope] SolarWinds Serv-U versions prior to 15.3 utilizing LDAP authentication
[Impact] Attackers can input unsanitized characters to manipulate LDAP queries, potentially leading to authentication bypass attempts or directory harvesting, with active exploitation confirmed via CISA KEV
[Mitigation] Immediately upgrade SolarWinds Serv-U to version 15.3 or later, and apply WAF rules to filter out LDAP special characters from login inputs