Skip to content
OpenAdvisories

Vendor

Fortra

47 known vulnerabilities.

Products

GoAnywhere MFT 15 Core Privileged Access Manager (BoKS) 6 FileCatalyst 4 FileCatalyst Workflow 4 Globalscape EFT 3 BoKS Manager 3 File Integrity Monitoring (FIM) 2 Digital Guardian Agent 2 BoKS Manager boks-server 2 Robot Schedule Enterprise 1 Fortra's Core Privileged Access Manager (BoKS) 1 Fortra Application Hub 1 Tripwire Enterprise 1 Robot Schedule Enterprise Agent 1 FileCatalyst Direct 1 GoAnywhere 1 Tripwire 0 File Integrity Monitoring 0 GoAnywhere MFT > 6.0.1 0 GoAnywhere MFT < 7.4.1 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-10035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Deserialization Vulnerability in GoAnywhere MFT's License Servlet

    A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

    Fortra GoAnywhere MFT
    KEV Sep 29, 2025
  • Critical 9.8
    CVE-2024-5276 Public exploit Scanner template EPSS 90%

    SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)

    A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data.  Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL i…

    Fortra FileCatalyst Workflow
  • Critical 9.8
    CVE-2024-25153 Public exploit EPSS 42%

    Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

    A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web …

    Fortra FileCatalyst
  • Critical 9.8
    CVE-2024-0204 Public exploit Scanner template EPSS 95%

    Authentication Bypass in GoAnywhere MFT

    Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

    Fortra GoAnywhere MFT
  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    Fortra GoAnywhere MFT
    KEV Feb 10, 2023