Fortra

Records50All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Fortra records in CISA KEV

TI-2025-09211 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2025-09-29 TI-2022-18577 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2023-03-30 TI-2022-20934 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 100KEV 2023-03-30 TI-2023-00634 Fortra GoAnywhere MFT Remote Code Execution Vulnerability CRITICAL 91KEV 2023-02-10

Components

Products in the NVD configurations · select one to filter the records

Goanywhere Managed File Transfer 13 records CRITICAL Filecatalyst Workflow 4 records CRITICAL Core Privileged Access Manager Server 2 records MEDIUM File Integrity Monitoring 2 records LOW Filecatalyst Direct 2 records MEDIUM Robot Schedule 2 records LOW Delivernow 1 record HIGH Digital Guardian Agent 1 record LOW

Records

2 records in File Integrity Monitoring · all components

TI-2026-10466 CVE-2026-12163 · GHSA-r6vh-m36j-r62m

Stored XSS in Fortra File Integrity Monitoring (FIM)

LOW 24

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting (XSS) vulnerability in the Asset View UI component.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00242 Published 2026-06-23 Fixed in 9.4.0.1 CWE-79

TI-2026-10467 CVE-2026-12164 · GHSA-3x8g-cjc2-45qp

Privilege Escalation in Fortra File Integrity Monitoring (FIM)

LOW 19

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, par…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00145 Published 2026-06-23 Fixed in 9.4.0 CWE-266

Open these records in search →