CVE-2020-28001

Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U versions prior to 15.2.2

Description: The issue allows for Authenticated Stored XSS. This means that an authenticated attacker can inject malicious code into the application, which will then be stored and executed by the application, potentially affecting other users.

Recommendations: For versions prior to 15.2.2, update to version 15.2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.