Axway

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Axway records in CISA KEV

No Axway vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Securetransport 3 records MEDIUM Email Firewall 1 record LOW File Tranfer Direct 1 record MEDIUM Secure Messenger 1 record LOW Vordel Xml Gateway 1 record LOW

Records

3 records in Securetransport · all components

TI-2019-10632 CVE-2019-14277 · GHSA-9g7f-qqq7-j65j

Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration)…

MEDIUM 52

Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the resetPassword functionality via the REST API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07327 Published 2019-07-26 No fix listed CWE-91

TI-2012-04217 CVE-2012-4991 · GHSA-qr4m-qxp9-h6pg

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier…

MEDIUM 44

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ..%5C (encoded dot d…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.04553 Published 2012-12-13 No fix listed CWE-22

TI-2013-05797 CVE-2013-7057 · GHSA-969h-mh45-m487

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and…

LOW 33

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafte…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01429 Published 2014-11-04 No fix listed CWE-352

Open these records in search →

Critical	2
High	3
Medium	2
Low	0
No CVSS	0