Fortra

Records50All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Fortra records in CISA KEV

TI-2025-09211 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2025-09-29 TI-2022-18577 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2023-03-30 TI-2022-20934 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 100KEV 2023-03-30 TI-2023-00634 Fortra GoAnywhere MFT Remote Code Execution Vulnerability CRITICAL 91KEV 2023-02-10

Components

Products in the NVD configurations · select one to filter the records

Goanywhere Managed File Transfer 13 records CRITICAL Filecatalyst Workflow 4 records CRITICAL Core Privileged Access Manager Server 2 records MEDIUM File Integrity Monitoring 2 records LOW Filecatalyst Direct 2 records MEDIUM Robot Schedule 2 records LOW Delivernow 1 record HIGH Digital Guardian Agent 1 record LOW

Records

1 record in Delivernow · all components

TI-2021-08460 CVE-2021-26837 · GHSA-9v9v-hgjm-9gfq

SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems)…

HIGH 82

SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0094 Published 2023-09-18 No fix listed CWE-89

Open these records in search →

Critical	13
High	13
Medium	24
Low	0
No CVSS	0