Accellion

Records128All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high58CVSS 7.0–8.9

Exploited now

Accellion records in CISA KEV

TI-2021-08669 Accellion FTA SQL Injection Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-08670 Accellion FTA OS Command Injection Vulnerability CRITICAL 93KEV 2021-11-03 TI-2021-08671 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability CRITICAL 100KEV 2021-11-03 TI-2021-08672 Accellion FTA OS Command Injection Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Kiteworks 82 records HIGH File Transfer Appliance 20 records HIGH Secure File Transfer Appliance 7 records MEDIUM Fta 6 records CRITICAL Kiteworks Managed File Transfer 4 records MEDIUM Kiteworks Appliance 3 records LOW Ftp Server 2 records LOW Managed File Transfer 1 record LOW

Records

20 records in File Transfer Appliance · all components

TI-2015-02522 CVE-2015-2857 · GHSA-2qg2-967q-rc49

Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute…

HIGH 83

Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84178 Published 2017-08-22 No fix listed CWE-77

TI-2015-02521 CVE-2015-2856 · GHSA-ffv8-9h6w-3f22

Directory traversal vulnerability in the template function in function.inc in Accellion…

HIGH 66

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a ..

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.56573 Published 2017-10-10 No fix listed CWE-22

TI-2017-05869 CVE-2017-8303 · GHSA-7h3r-xf2x-c3p7

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

MEDIUM 63

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.2418 Published 2017-05-05 No fix listed CWE-116

TI-2017-06305 CVE-2017-8794 · GHSA-5359-92wf-c9gq

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

MEDIUM 47

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01895 Published 2017-05-05 No fix listed CWE-918

TI-2016-02114 CVE-2016-2352 · GHSA-8467-3m53-p58p

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote…

MEDIUM 46

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05381 Published 2016-05-07 No fix listed CWE-264

TI-2019-03988 CVE-2019-5623 · GHSA-ppwj-cv8x-vq3q

Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')

MEDIUM 45

Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection').

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01578 Published 2020-04-29 No fix listed CWE-77

TI-2017-06301 CVE-2017-8790 · GHSA-vmxx-hrq4-4r4j

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

MEDIUM 45

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01373 Published 2017-05-05 No fix listed CWE-90

TI-2016-02113 CVE-2016-2351 · GHSA-76jv-j36q-7f6q

SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File…

MEDIUM 45

SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the client_id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01579 Published 2016-05-07 No fix listed CWE-89

TI-2019-03987 CVE-2019-5622 · GHSA-qcmg-363r-qchp

Accellion File Transfer Appliance Use of Hard-coded Credentials

MEDIUM 44

Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01101 Published 2020-04-29 No fix listed CWE-798

TI-2017-06307 CVE-2017-8796 · GHSA-fwcg-3gvg-82jp

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

MEDIUM 44

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2017-05-05 No fix listed CWE-89

TI-2017-06300 CVE-2017-8789 · GHSA-qm87-mq8x-xc8r

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

MEDIUM 44

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01161 Published 2017-05-05 No fix listed CWE-89

TI-2017-06304 CVE-2017-8793 · GHSA-x9r2-f53m-rgrx

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 39

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00514 Published 2017-05-05 No fix listed CWE-346

TI-2016-02115 CVE-2016-2353 · GHSA-9gfm-w9p6-gjvg

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add…

LOW 35

The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00473 Published 2016-05-07 No fix listed CWE-264

TI-2017-06274 CVE-2017-8760 · GHSA-w5wv-wm67-g67m

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 30

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0123 Published 2017-05-05 No fix listed CWE-79

TI-2016-02112 CVE-2016-2350 · GHSA-g4pr-w73q-525w

Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) getimageaja…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00938 Published 2016-05-07 No fix listed CWE-79

TI-2017-06306 CVE-2017-8795 · GHSA-pc8p-24v7-4pfm

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 28

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-05-05 No fix listed CWE-79

TI-2017-06303 CVE-2017-8792 · GHSA-x2ch-c8mw-p37r

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 28

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-05-05 No fix listed CWE-79

TI-2017-06302 CVE-2017-8791 · GHSA-v65p-hgf8-v8qq

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 28

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-05-05 No fix listed CWE-93

TI-2017-06299 CVE-2017-8788 · GHSA-j4m7-fwx2-6w4c

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 28

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-05-05 No fix listed CWE-93

TI-2017-05870 CVE-2017-8304 · GHSA-jv9p-c66w-3wf7

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

LOW 28

An issue was discovered on Accellion FTA devices before FTA_9_12_180.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2017-05-05 No fix listed CWE-79

Open these records in search →