Cyberduck

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cyberduck records in CISA KEV

No Cyberduck vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cyberduck 1 record LOW

Records

1 record

TI-2014-02281 CVE-2014-2845 · GHSA-9555-fvr7-fm2h

Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains…

LOW 28

Cyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which allows man-in-the-middle attackers to spoof FTP-SSL servers via a certificate issued by an arbitrary root Certification Authori…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00935 Published 2017-11-15 No fix listed CWE-295

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0