Secure File Transfer Appliance vulnerabilities | LiveThreat CVE Feed

Product

Secure File Transfer Appliance

by Accellion · last CVE Feb 19, 2010

CVEs

On KEV

–

Max CVSS

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities7 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Secure File Transfer Appliance to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2009-4648	–	1%	Feb 19	Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with extra sudo privileges, which allows… Affected: 7_0_135; 7_0_178; 7_0_189; 7_0_259; 7_0_296
CVE-2009-4647	–	1%	Feb 19	Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attackers to inject arbitrary web script or HTML via the username… Affected: 7_0_135; 7_0_178; 7_0_189; 7_0_259
CVE-2009-4646	–	2%	Feb 19	Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary… Affected: All versions, or not specified
CVE-2009-4645	–	3%	Feb 19	Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote attackers to read arbitrary files via a Affected: 7_0_135; 7_0_178; 7_0_189; 7_0_259; 7_0_296
CVE-2009-4644	–	2%	Feb 19	Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell… Affected: 7_0_135; 7_0_178; 7_0_189; 7_0_259; 7_0_296
CVE-2008-7012	–	7%	Aug 19	courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote… Affected: through 7_0_178; 7_0_135
CVE-2008-3850	–	1%	Aug 27	Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to… Affected: 7_0_135