Read the docs

Ipswitch

Records109All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high30CVSS 7.0–8.9

Exploited now

Ipswitch records in CISA KEV

No Ipswitch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Imail 38 records HIGH Ipswitch Collaboration Suite 13 records HIGH Ws Ftp Server 13 records HIGH Imail Server 12 records HIGH Ws Ftp 8 records MEDIUM Whatsup Professional 7 records LOW Ws Ftp Pro 6 records MEDIUM Moveit Dmz 5 records MEDIUM

Records

5 records in Moveit Dmz · all components

TI-2015-06378 CVE-2015-7675 · GHSA-r6pf-9j68-mvrh

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile…

Priority LOW 34

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileI…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03111 Published 2016-02-10 No fix listed CWE-200
TI-2015-06383 CVE-2015-7680 · GHSA-3q5v-35pc-2r23

Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication…

Priority LOW 28

Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP request…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02149 Published 2016-02-10 No fix listed CWE-200
TI-2015-06379 CVE-2015-7676 · GHSA-wgjf-mpjv-hj87

Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support…

Priority LOW 28

Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01778 Published 2016-04-15 No fix listed CWE-79
TI-2015-06380 CVE-2015-7677 · GHSA-jqhf-vm6r-p3j2

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error…

Priority LOW 25

The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the X-siLock-FileID param…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02954 Published 2016-02-10 No fix listed CWE-200
Open these records in search →