Accellion

Records128All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high58CVSS 7.0–8.9

Exploited now

Accellion records in CISA KEV

Products in the NVD configurations · select one to filter the records

6 records in Fta · all components

TI-2021-08672 CVE-2021-27104 · GHSA-54w2-m25f-gmqp

CRITICAL 100KEV

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.56686 Published 2021-02-16 No fix listed CWE-78

TI-2021-08671 CVE-2021-27103 · GHSA-j665-969m-hg73

CRITICAL 100KEV

Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11406 Published 2021-02-16 No fix listed CWE-918

TI-2021-08669 CVE-2021-27101 · GHSA-gc74-7wpx-43ch

CRITICAL 100KEV

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05998 Published 2021-02-16 No fix listed

TI-2021-08670 CVE-2021-27102 · GHSA-vcwv-2759-43q3

CRITICAL 93KEV

Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03654 Published 2021-02-16 No fix listed CWE-78

TI-2021-09141 CVE-2021-27730 · GHSA-6346-27p9-5355

MEDIUM 45

Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01454 Published 2021-03-02 No fix listed CWE-74

TI-2021-09142 CVE-2021-27731 · GHSA-r77v-287j-34fv

LOW 28

Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00721 Published 2021-03-02 No fix listed CWE-79