Skip to content
Noroxi

Accellion records

126 published records for vendor accellion.

Researcher profile

Entered KEV
4 · 3.2%
Weaponized
6 · 4.8%
Pre-auth RCE
5
With a fix record
4.8%
Median publish → KEV
260 days

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

126 records
  • CVE-2021-27104
    86Now

    Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.

    CriticalCVSS 9.8KEVWeaponizedEPSS 56%

    accellion · ftaFeb 16, 2021

  • CVE-2021-27103
    72This week

    Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html.

    CriticalCVSS 9.8KEVWeaponizedEPSS 11%

    accellion · ftaFeb 16, 2021

  • CVE-2021-27101
    71This week

    Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.

    CriticalCVSS 9.8KEVWeaponizedEPSS 5%

    accellion · ftaFeb 16, 2021

  • CVE-2015-2857
    64This week

    Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oaut

    CriticalCVSS 9.8WeaponizedEPSS 84%

    accellion · file transfer applianceAug 22, 2017

  • CVE-2021-27102
    62This week

    Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call.

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    accellion · ftaFeb 16, 2021

  • CVE-2015-2856
    60This week

    Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210

    HighCVSS 7.5WeaponizedEPSS 56%

    accellion · file transfer applianceOct 10, 2017

  • CVE-2021-31586
    48Plan

    Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

    HighCVSS 8.8No exploitEPSS 44%

    accellion · kiteworksJun 23, 2021

  • CVE-2017-8303
    46Plan

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    CriticalCVSS 9.8No exploitEPSS 24%

    accellion · file transfer applianceMay 5, 2017

  • CVE-2017-8794
    41Plan

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    CriticalCVSS 10.0No exploitEPSS 1%

    accellion · file transfer applianceMay 5, 2017

  • CVE-2016-2351
    39Monitor

    SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceMay 7, 2016

  • CVE-2019-5623
    39Monitor

    Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceApr 29, 2020

  • CVE-2021-27730
    39Monitor

    Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint.

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · ftaMar 1, 2021

  • CVE-2017-8790
    39Monitor

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceMay 5, 2017

  • CVE-2017-8789
    39Monitor

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceMay 5, 2017

  • CVE-2017-8796
    39Monitor

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceMay 5, 2017

  • CVE-2019-5622
    39Monitor

    Accellion File Transfer Appliance Use of Hard-coded Credentials

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · file transfer applianceApr 29, 2020

  • CVE-2026-102115
    39Monitor

    Kiteworks Core Authentication Bypass in the Password Reset Workflow

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2016-2352
    37Monitor

    The Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users to execute arbitrary commands by leveraging

    HighCVSS 8.8No exploitEPSS 5%

    accellion · file transfer applianceMay 7, 2016

  • CVE-2009-4644
    37Monitor

    Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execut

    CriticalCVSS 9.0No exploitEPSS 2%

    accellion · secure file transfer applianceFeb 19, 2010

  • CVE-2009-4646
    37Monitor

    Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authentica

    CriticalCVSS 9.0No exploitEPSS 1%

    accellion · secure file transfer applianceFeb 19, 2010

  • CVE-2026-102147
    37Monitor

    Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

    CriticalCVSS 9.3No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102149
    37Monitor

    Kiteworks Email Protection Gateway Improper Access Control

    CriticalCVSS 9.4No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-28269
    36Monitor

    Kiteworks Core has an OS Command Injection

    HighCVSS 8.8No exploitEPSS 3%

    accellion · kiteworksFeb 26, 2026

  • CVE-2026-102106
    36Monitor

    Kiteworks Email Protection Gateway improper authentication

    CriticalCVSS 9.1No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102102
    36Monitor

    Kiteworks Email Protection Gateway server-side request forgery

    CriticalCVSS 9.1No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026