Back to the CVE list
CVE-2024-28995 CISA KEV · Actively exploited

SolarWinds Serv-U Path Traversal Vulnerability

CVSS score

—

EPSS probability

%99.6

Risk score

—

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2024-28955 Exploitation PoC (★4)

Public PoCSource updated: 02.07.2024 03:27:29

SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995) POC (★0)

Public PoCSource updated: 14.06.2024 18:51:26

CVE-2024-28995 PoC (★0)

Public PoCSource updated: 14.06.2024 13:09:37

CVE-2024-28995 PoC (★0)

Public PoCSource updated: 14.06.2024 15:14:35

Exploit for CVE-2024-28995 (★0)

Public PoCSource updated: 14.06.2024 17:08:32

CVE-2024-28995 POC Vulnerability Scanner (★0)

Public PoCSource updated: 15.06.2024 08:56:56

SolarWinds Serv-U Directory Traversal Vulnerability (CVE-2024-28995) POC (★0)

Public PoCSource updated: 17.06.2024 04:24:15

Exploit for CVE-2024-28995 affecting SolarWinds Serv-U 15.4.2 HF 1 and previous versions (★0)

Public PoCSource updated: 26.06.2024 20:54:57

SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine. (★0)

Public PoCSource updated: 25.08.2024 02:22:32

SolarWinds Serv-U Directory Traversal (★0)

Public PoCSource updated: 28.05.2025 19:43:10

SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal (★0)

Public PoCSource updated: 15.06.2025 19:43:29

SolarWinds Serv-U 15.4.2 HF1 - Directory Traversal

Exploit referenceSource updated: 29.05.2025 00:00:00

Nuclei: SolarWinds Serv-U - Directory Traversal

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-28995"