WS
Product
WS_FTP Server
On CISA KEVExploited in the wildRansomware-linked
28
CVEs
1
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 8Low 0
Watch
Add WS_FTP Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7744 | 6.5 | Aug 28 | In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Web Transfer Module… Affected: before 8.8.8 |
| CVE-2023-40048 | 6.5 | Sep 27 | In WS_FTP Server version prior to 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a… Affected: before 8.8.2 |
| CVE-2024-1474 | 6.1 | Feb 21 | In WS_FTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WS_FTP Server administrative interface Affected: before 8.8.5 |
| CVE-2023-40045 | 6.1 | Sep 27 | In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Ad Hoc Transfer module. An attacker could… Affected: before 8.7.4; 8.8 before 8.8.2 |
| CVE-2022-27665 | 6.1 | Apr 3 | Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0 Affected: 8.6.0 |
| CVE-2023-40049 | 5.3 | Sep 27 | In WS_FTP Server version prior to 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing Affected: before 8.8.2 |
| CVE-2019-12143 | 5.3 | Jun 11 | A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1 Affected: before 8.6.1 |
| CVE-2023-40047 | 4.8 | Sep 27 | In WS_FTP Server version prior to 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module Affected: before 8.8.2 |
Showing 8