Fortra

Records50All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Fortra records in CISA KEV

TI-2025-09211 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2025-09-29 TI-2022-18577 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2023-03-30 TI-2022-20934 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 100KEV 2023-03-30 TI-2023-00634 Fortra GoAnywhere MFT Remote Code Execution Vulnerability CRITICAL 91KEV 2023-02-10

Components

Products in the NVD configurations · select one to filter the records

Goanywhere Managed File Transfer 13 records CRITICAL Filecatalyst Workflow 4 records CRITICAL Core Privileged Access Manager Server 2 records MEDIUM File Integrity Monitoring 2 records LOW Filecatalyst Direct 2 records MEDIUM Robot Schedule 2 records LOW Delivernow 1 record HIGH Digital Guardian Agent 1 record LOW

Records

4 records in Filecatalyst Workflow · all components

TI-2024-04900 CVE-2024-5276 · GHSA-mgcv-6r68-pw73

SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)

CRITICAL 92

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90067 Published 2024-06-25 No fix listed CWE-20

TI-2024-16604 CVE-2024-25153 · GHSA-4cvq-vvgx-cv87

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

HIGH 82

A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.41741 Published 2024-03-13 Fixed in 5.1.6 CWE-472

TI-2024-06150 CVE-2024-6633 · GHSA-g79x-6jx3-7f7g

Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

MEDIUM 51

The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01167 Published 2024-08-27 No fix listed CWE-200

TI-2024-06149 CVE-2024-6632 · GHSA-h5mc-wcjm-jrgw

SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

LOW 35

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00606 Published 2024-08-27 No fix listed CWE-89

Open these records in search →