İçeriğe atla
Noroxi

Accellion kayıtları

accellion üreticisine ait 65 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
4 · %6,2
Silahlaştırılmış
6 · %9,2
Pre-auth RCE
5
Düzeltme kaydı olan
%9,2
Yayından KEV’e ortanca
260 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

65 kayıt
  • CVE-2021-27104
    86Hemen

    Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %57

    accellion · fta16 Şub 2021

  • CVE-2021-27103
    72Bu hafta

    Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %11

    accellion · fta16 Şub 2021

  • CVE-2021-27101
    71Bu hafta

    Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %6

    accellion · fta16 Şub 2021

  • CVE-2015-2857
    64Bu hafta

    Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oaut

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    accellion · file transfer appliance22 Ağu 2017

  • CVE-2021-27102
    62Bu hafta

    Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %4

    accellion · fta16 Şub 2021

  • CVE-2021-31586
    48Planlayın

    Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

    YüksekCVSS 8,8İstismar yokEPSS %44

    accellion · kiteworks23 Haz 2021

  • CVE-2015-2856
    47Planlayın

    Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210

    YüksekCVSS 7,5SilahlaştırılmışEPSS %57

    accellion · file transfer appliance10 Eki 2017

  • CVE-2017-8303
    46Planlayın

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 9,8İstismar yokEPSS %24

    accellion · file transfer appliance5 May 2017

  • CVE-2017-8794
    41Planlayın

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 10,0İstismar yokEPSS %2

    accellion · file transfer appliance5 May 2017

  • CVE-2016-2351
    39İzleyin

    SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows

    KritikCVSS 9,8İstismar yokEPSS %2

    accellion · file transfer appliance7 May 2016

  • CVE-2019-5623
    39İzleyin

    Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')

    KritikCVSS 9,8İstismar yokEPSS %2

    accellion · file transfer appliance29 Nis 2020

  • CVE-2021-27730
    39İzleyin

    Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint.

    KritikCVSS 9,8İstismar yokEPSS %1

    accellion · fta1 Mar 2021

  • CVE-2017-8790
    39İzleyin

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 9,8İstismar yokEPSS %1

    accellion · file transfer appliance5 May 2017

  • CVE-2017-8789
    39İzleyin

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 9,8İstismar yokEPSS %1

    accellion · file transfer appliance5 May 2017

  • CVE-2017-8796
    39İzleyin

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 9,8İstismar yokEPSS %1

    accellion · file transfer appliance5 May 2017

  • CVE-2019-5622
    39İzleyin

    Accellion File Transfer Appliance Use of Hard-coded Credentials

    KritikCVSS 9,8İstismar yokEPSS %1

    accellion · file transfer appliance29 Nis 2020

  • CVE-2016-2352
    37İzleyin

    The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging

    YüksekCVSS 8,8İstismar yokEPSS %5

    accellion · file transfer appliance7 May 2016

  • CVE-2009-4644
    37İzleyin

    Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execut

    KritikCVSS 9,0İstismar yokEPSS %2

    accellion · secure file transfer appliance19 Şub 2010

  • CVE-2009-4646
    37İzleyin

    Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authentica

    KritikCVSS 9,0İstismar yokEPSS %2

    accellion · secure file transfer appliance19 Şub 2010

  • CVE-2026-28269
    36İzleyin

    Kiteworks Core has an OS Command Injection

    YüksekCVSS 8,8İstismar yokEPSS %3

    accellion · kiteworks26 Şub 2026

  • CVE-2025-53900
    35İzleyin

    Kiteworks MFT has a Privilege Defined With Unsafe Actions

    YüksekCVSS 8,8İstismar yokEPSS %1

    accellion · kiteworks managed file transfer28 Kas 2025

  • CVE-2025-53939
    35İzleyin

    Kiteworks Core is vulnerable to Improper Input Validation

    YüksekCVSS 8,8İstismar yokEPSS %1

    accellion · kiteworks28 Kas 2025

  • CVE-2026-24782
    35İzleyin

    Kiteworks Secure Data Forms has a SQL Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    accellion · kiteworks1 Haz 2026

  • CVE-2017-8793
    35İzleyin

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    YüksekCVSS 8,8İstismar yokEPSS %1

    accellion · file transfer appliance5 May 2017

  • CVE-2008-7012
    33İzleyin

    courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other version

    YüksekCVSS 7,8Kavram kanıtıEPSS %7

    accellion · secure file transfer appliance19 Ağu 2009