Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Progress Software WS_FTP Server — community.progress.com/s/article/WS-FTP-Server-Service-Pack… Clear all filters
TI-2024-07180 CVE-2024-7745 · GHSA-v85v-4g2g-qmj9

Multi-Factor Authentication Bypass in Progress WS_FTP Server

Priority LOW 37

In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and passwo…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00365 Published 2024-08-28 Fixed in 8.8.8 CWE-290
TI-2024-07179 CVE-2024-7744 · GHSA-m9cp-9vc4-2wpg

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server

Priority LOW 32

In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, Use…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00688 Published 2024-08-28 Fixed in 8.8.8 CWE-22