FT
Product
File Transfer Appliance
20
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 4Medium 7Low 0
Watch
Add File Transfer Appliance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8794 | 10.0 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2019-5623 | 9.8 | Apr 29 | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') Affected: 8_0_540 |
| CVE-2019-5622 | 9.8 | Apr 29 | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials Affected: 8_0_540 |
| CVE-2015-2857 | 9.8 | Aug 22 | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter Affected: through 9_11_200 |
| CVE-2017-8796 | 9.8 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8790 | 9.8 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8789 | 9.8 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8303 | 9.8 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: before 9_12_180 |
| CVE-2016-2351 | 9.8 | May 7 | SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary… Affected: through 9_11_210 |
| CVE-2017-8793 | 8.8 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2016-2352 | 8.8 | May 7 | The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role Affected: through 9_11_210 |
| CVE-2016-2353 | 7.8 | May 7 | The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified… Affected: through 9_11_210 |
| CVE-2015-2856 | 7.5 | Oct 10 | Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read… Affected: through fta_9_11_200 |
| CVE-2017-8795 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8792 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8791 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8788 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8760 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2017-8304 | 6.1 | May 5 | An issue was discovered on Accellion FTA devices before FTA_9_12_180 Affected: through 9_12_40 |
| CVE-2016-2350 | 6.1 | May 7 | Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML… Affected: through 9_11_210 |
Showing 20