WS
Product
WS_FTP Server
On CISA KEVExploited in the wildRansomware-linked
28
CVEs
1
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 8Low 0
Watch
Add WS_FTP Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40044 RansomwareIn wildKEV | 8.8 | Sep 27 | WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability Affected: before 8.7.4; 8.8 before 8.8.2 |
| CVE-2023-42659 | 8.8 | Nov 7 | In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified Affected: before 8.7.6; 8.8.0 before 8.8.4 |
| CVE-2024-7745 | 8.1 | Aug 28 | In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor… Affected: before 8.8.8 |
| CVE-2023-40046 | 7.2 | Sep 27 | In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WS_FTP Server manager interface Affected: before 8.7.4; 8.8 before 8.8.2 |
| CVE-2023-24029 | 7.2 | Feb 3 | In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization… Affected: before 8.8 |
Showing 5