Vulnerabilities

TI-2019-10632 CVE-2019-14277 · GHSA-9g7f-qqq7-j65j

Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration)…

MEDIUM 52

Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the resetPassword functionality via the REST API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07327 Published 2019-07-26 No fix listed CWE-91

TI-2013-05797 CVE-2013-7057 · GHSA-969h-mh45-m487

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and…

LOW 33

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafte…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01429 Published 2014-11-04 No fix listed CWE-352

TI-2012-04217 CVE-2012-4991 · GHSA-qr4m-qxp9-h6pg

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier…

MEDIUM 44

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) delete, or (3) create files, or (4) list directories, via a ..%5C (encoded dot d…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.04553 Published 2012-12-13 No fix listed CWE-22

Vulnerabilities

Filters

Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration)…

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and…

Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier…