Filtered by vendor Progress Subscriptions
Filtered by product Ipswitch Ws Ftp Server Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-36968 1 Progress 1 Ipswitch Ws Ftp Server 2024-11-21 4.3 Medium
In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.
CVE-2022-36967 1 Progress 1 Ipswitch Ws Ftp Server 2024-11-21 6.1 Medium
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScript into a WS_FTP administrator's web session. This would allow the attacker to execute code within the context of the victim's browser.