İçeriğe atla
Noroxi

Fortra kayıtları

fortra üreticisine ait 29 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %6,9
Silahlaştırılmış
4 · %13,8
Pre-auth RCE
6
Düzeltme kaydı olan
%58,6
Yayından KEV’e ortanca
8 gün

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

29 kayıt
  • CVE-2025-10035
    99Hemen

    Deserialization Vulnerability in GoAnywhere MFT's License Servlet

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    fortra · goanywhere managed file transfer18 Eyl 2025

  • CVE-2023-0669
    88Hemen

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %99

    fortra · goanywhere managed file transfer6 Şub 2023

  • CVE-2024-0204
    68Bu hafta

    Authentication Bypass in GoAnywhere MFT

    KritikCVSS 9,8SilahlaştırılmışEPSS %95

    fortra · goanywhere managed file transfer22 Oca 2024

  • CVE-2024-5276
    63Bu hafta

    SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)

    KritikCVSS 9,1SilahlaştırılmışEPSS %90

    fortra · filecatalyst workflow25 Haz 2024

  • CVE-2024-25153
    52Planlayın

    Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    fortra · filecatalyst workflow13 Mar 2024

  • CVE-2024-6633
    39İzleyin

    Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

    KritikCVSS 9,8İstismar yokEPSS %1

    fortra · filecatalyst workflow27 Ağu 2024

  • CVE-2026-9862
    39İzleyin

    Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %0

    fortra · core privileged access manager server15 Haz 2026

  • CVE-2021-26837
    39İzleyin

    SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers t

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    fortra · delivernow18 Eyl 2023

  • CVE-2024-4332
    37İzleyin

    Improper Authentication in Tripwire Enterprise 9.1.0 APIs

    KritikCVSS 9,3İstismar yokEPSS %0

    fortra · tripwire enterprise3 Haz 2024

  • CVE-2026-9863
    35İzleyin

    Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    fortra · core privileged access manager server15 Haz 2026

  • CVE-2024-5275
    31İzleyin

    Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)

    YüksekCVSS 7,8İstismar yokEPSS %0

    fortra · filecatalyst direct18 Haz 2024

  • CVE-2024-0259
    29İzleyin

    Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04

    YüksekCVSS 7,3İstismar yokEPSS %0

    fortra · robot schedule28 Mar 2024

  • CVE-2025-14362
    29İzleyin

    GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances

    YüksekCVSS 7,3İstismar yokEPSS %0

    fortra · goanywhere managed file transfer21 Nis 2026

  • CVE-2024-6632
    28İzleyin

    SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

    YüksekCVSS 7,2İstismar yokEPSS %0

    fortra · filecatalyst workflow27 Ağu 2024

  • CVE-2024-25157
    26İzleyin

    Authentication bypass in GoAnywhere MFT prior to 7.6.0

    OrtaCVSS 6,5İstismar yokEPSS %0

    fortra · goanywhere managed file transfer14 Ağu 2024

  • CVE-2024-25156
    26İzleyin

    Path traversal in GoAnywhere MFT 7.4.1 and Earlier

    OrtaCVSS 6,5İstismar yokEPSS %0

    fortra · goanywhere managed file transfer14 Mar 2024

  • CVE-2026-1089
    26İzleyin

    User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups

    OrtaCVSS 6,5İstismar yokEPSS %0

    fortra · goanywhere managed file transfer21 Nis 2026

  • CVE-2024-25155
    24İzleyin

    Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier

    OrtaCVSS 6,1İstismar yokEPSS %0

    fortra · filecatalyst direct13 Mar 2024

  • CVE-2023-6253
    24İzleyin

    Saved Uninstall Key in Digital Guardian Agent Uninstaller

    OrtaCVSS 6,0İstismar yokEPSS %0

    fortra · digital guardian agent22 Kas 2023

  • CVE-2024-8264
    22İzleyin

    Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05

    OrtaCVSS 5,5İstismar yokEPSS %0

    fortra · robot schedule9 Eki 2024

  • CVE-2024-25154
    21İzleyin

    Path Traversal in FileCatalyst Direct 3.8.8 and Earlier

    OrtaCVSS 5,3İstismar yokEPSS %0

    fortra · filecatalyst direct13 Mar 2024

  • CVE-2024-11922
    21İzleyin

    Input Validation vulnerability in Web Client emails that do not go through Secure Mail

    OrtaCVSS 5,4İstismar yokEPSS %0

    fortra · goanywhere managed file transfer28 Nis 2025

  • CVE-2026-0972
    21İzleyin

    HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT

    OrtaCVSS 5,4İstismar yokEPSS %0

    fortra · goanywhere managed file transfer21 Nis 2026

  • CVE-2026-12163
    19İzleyin

    Stored XSS in Fortra File Integrity Monitoring (FIM)

    OrtaCVSS 4,8İstismar yokEPSS %0

    fortra · file integrity monitoring23 Haz 2026

  • CVE-2025-1241
    19İzleyin

    Encryption vulnerable to brute-force decryption in GoAnywhere MFT

    OrtaCVSS 4,9İstismar yokEPSS %0

    fortra · goanywhere agents21 Nis 2026