Read the docs

Fortra

Records50All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Fortra records in CISA KEV
TI-2025-09211 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2025-09-29TI-2022-18577 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability Priority HIGH 84KEV 2023-03-30TI-2022-20934 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2023-03-30TI-2023-00634 Fortra GoAnywhere MFT Remote Code Execution Vulnerability Priority CRITICAL 91KEV 2023-02-10

Components

Products in the NVD configurations · select one to filter the records
Goanywhere Managed File Transfer 13 records CRITICAL Filecatalyst Workflow 4 records CRITICAL Core Privileged Access Manager Server 2 records MEDIUM File Integrity Monitoring 2 records LOW Filecatalyst Direct 2 records MEDIUM Robot Schedule 2 records LOW Delivernow 1 record HIGH Digital Guardian Agent 1 record LOW

Records

2 records in Filecatalyst Direct · all components

TI-2024-16605 CVE-2024-25154 · GHSA-fhxr-6q8q-x43m

Path Traversal in FileCatalyst Direct 3.8.8 and Earlier

Priority LOW 26

Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the web root which may lead to data leakage.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00464 Published 2024-03-13 Fixed in 3.8.9 CWE-22
Open these records in search →