Priority MEDIUM 45
Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection').
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01578 · Published 2020-04-29 · No fix listed CWE-77
Priority MEDIUM 44
Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01101 · Published 2020-04-29 · No fix listed CWE-798
Priority HIGH 66
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a ..
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.56573 · Published 2017-10-10 · No fix listed CWE-22
Priority HIGH 83
Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.84178 · Published 2017-08-22 · No fix listed CWE-77
Priority MEDIUM 44
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-05-05 · No fix listed CWE-89
Priority LOW 28
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-05-05 · No fix listed CWE-79
Priority MEDIUM 47
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01895 · Published 2017-05-05 · No fix listed CWE-918
Priority LOW 39
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00514 · Published 2017-05-05 · No fix listed CWE-346
Priority LOW 28
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-05-05 · No fix listed CWE-79
Priority LOW 28
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-05-05 · No fix listed CWE-93
Priority MEDIUM 45
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01373 · Published 2017-05-05 · No fix listed CWE-90
Priority MEDIUM 44
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01161 · Published 2017-05-05 · No fix listed CWE-89
Priority LOW 28
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-05-05 · No fix listed CWE-93
Priority LOW 30
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0123 · Published 2017-05-05 · No fix listed CWE-79
Priority LOW 28
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00683 · Published 2017-05-05 · No fix listed CWE-79
Priority MEDIUM 63
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.2418 · Published 2017-05-05 · No fix listed CWE-116
Priority LOW 35
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH key to an arbitrary group, and consequently gain privileges, via unspecified vectors.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00473 · Published 2016-05-07 · No fix listed CWE-264
Priority MEDIUM 46
The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging the YUM_CLIENT restricted-user role.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05381 · Published 2016-05-07 · No fix listed CWE-264
Priority MEDIUM 45
SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the client_id parameter.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01579 · Published 2016-05-07 · No fix listed CWE-89
Priority LOW 29
Multiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allow remote attackers to inject arbitrary web script or HTML via unspecified input to (1) getimageaja…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00938 · Published 2016-05-07 · No fix listed CWE-79
THREATIST.IORead the docs