Known Vulnerabilities for products from Accellion
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Accellion".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-24110 json | Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later. | 6.5 - MEDIUM | 2022-02-14 | 2023-08-08 |
| CVE-2021-31586 json | Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search. | 8.8 - HIGH | 2021-06-23 | 2021-06-25 |
| CVE-2021-31585 json | Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords... | 6.7 - MEDIUM | 2021-06-23 | 2022-07-12 |
| CVE-2021-27731 json | Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version... | 6.1 - MEDIUM | 2021-03-02 | 2021-03-05 |
| CVE-2021-27730 json | Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fix... | 9.8 - CRITICAL | 2021-03-02 | 2021-03-05 |
| CVE-2021-27104 json | Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints.... | 9.8 - CRITICAL | 2021-02-16 | 2021-02-17 |
| CVE-2021-27103 json | Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version i... | 9.8 - CRITICAL | 2021-02-16 | 2021-02-17 |
| CVE-2021-27102 json | Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA... | 7.8 - HIGH | 2021-02-16 | 2021-02-19 |
| CVE-2021-27101 json | Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html.... | 9.8 - CRITICAL | 2021-02-16 | 2023-08-08 |
| CVE-2019-5623 json | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special ... | 9.8 - CRITICAL | 2020-04-29 | 2021-09-14 |
| CVE-2019-5622 json | Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials. | 9.8 - CRITICAL | 2020-04-29 | 2020-05-07 |
| CVE-2017-9421 json | Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API c... | 6.5 - MEDIUM | 2018-05-24 | 2018-06-27 |
| CVE-2017-8796 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/couri... | 9.8 - CRITICAL | 2017-05-05 | 2017-05-17 |
| CVE-2017-8795 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with t... | 6.1 - MEDIUM | 2017-05-05 | 2017-05-17 |
| CVE-2017-8794 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local h... | 10 - CRITICAL | 2017-05-05 | 2017-05-17 |
| CVE-2017-8793 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmPr... | 8.8 - HIGH | 2017-05-05 | 2019-10-03 |
| CVE-2017-8792 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/user_add.html with th... | 6.1 - MEDIUM | 2017-05-05 | 2017-05-17 |
| CVE-2017-8791 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a home/seos/courier/login.html auth_params CRL... | 6.1 - MEDIUM | 2017-05-05 | 2017-05-17 |
| CVE-2017-8790 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter "fil... | 9.8 - CRITICAL | 2017-05-05 | 2017-05-17 |
| CVE-2017-8789 json | An issue was discovered on Accellion FTA devices before FTA_9_12_180. A report_error.php?year='payload SQL injection vector e... | 9.8 - CRITICAL | 2017-05-05 | 2017-05-17 |
Known software with vulnerabilities from Accellion
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Accellion | File Transfer Appliance | 8_0_540 |
| Application | Accellion | Fta | - |
| Application | Accellion | Kiteworks | 2017.01.00 |
| Application | Accellion | Kiteworks Appliance | kw2016.03.00 |