Filtered by vendor Accellion
Subscriptions
Filtered by product Fta
Subscriptions
Total
6 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-27731 | 1 Accellion | 1 Fta | 2024-11-21 | 6.1 Medium |
| Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_444 and later. | ||||
| CVE-2021-27730 | 1 Accellion | 1 Fta | 2024-11-21 | 9.8 Critical |
| Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA_9_12_444 and later. | ||||
| CVE-2021-27104 | 1 Accellion | 1 Fta | 2024-11-21 | 9.8 Critical |
| Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later. | ||||
| CVE-2021-27103 | 1 Accellion | 1 Fta | 2024-11-21 | 9.8 Critical |
| Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later. | ||||
| CVE-2021-27102 | 1 Accellion | 1 Fta | 2024-11-21 | 7.8 High |
| Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. | ||||
| CVE-2021-27101 | 1 Accellion | 1 Fta | 2024-11-21 | 9.8 Critical |
| Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later. | ||||
Page 1 of 1.