PT-2025-16305 · Solarwinds · Solarwinds Serv-U

Published 2025-04-15 · Updated 2025-11-18 · CVE-2024-45712

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U (affected versions not specified)

Description The issue is related to a client-side cross-site scripting (XSS) vulnerability. It can only be exploited by an authenticated account on the local machine from the local browser session, which is considered a low-risk scenario due to these constraints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-11607

CVE-2024-45712

Affected Products

Solarwinds Serv-U

References · 11

• https://bdu.fstec.ru/vul/2025-11607 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-45712 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45712 · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/CVE-2024-45712 · Vendor Advisory
• https://t.me/cvedetector/22928 · Telegram Post
• https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-1_release_notes.htm · Note
• https://twitter.com/cybercronai/status/1912291252453732581 · Twitter Post
• https://solarwinds.com/trust-center/security-advisories/cve-2024-45712 · Note
• https://t.me/cvetracker/21602 · Telegram Post
• https://t.me/cveNotify/143287 · Telegram Post
• https://twitter.com/CVEnew/status/1912065232501129244 · Twitter Post