CVE-2021-32604

Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."

published May 11, 2021

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01720 · 77.3th percentile
Published
2021-05-11T22:16Z
EPSS history
Timeline
  • 11 MAY 22:16Z
    Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS."
    cvelistv5