Skip to content
OpenAdvisories

Vendor

Fortra

47 known vulnerabilities.

Products

GoAnywhere MFT 15 Core Privileged Access Manager (BoKS) 6 FileCatalyst 4 FileCatalyst Workflow 4 Globalscape EFT 3 BoKS Manager 3 File Integrity Monitoring (FIM) 2 Digital Guardian Agent 2 BoKS Manager boks-server 2 Robot Schedule Enterprise 1 Fortra's Core Privileged Access Manager (BoKS) 1 Fortra Application Hub 1 Tripwire Enterprise 1 Robot Schedule Enterprise Agent 1 FileCatalyst Direct 1 GoAnywhere 1 Tripwire 0 File Integrity Monitoring 0 GoAnywhere MFT > 6.0.1 0 GoAnywhere MFT < 7.4.1 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-10035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Deserialization Vulnerability in GoAnywhere MFT's License Servlet

    A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

    Fortra GoAnywhere MFT
    KEV Sep 29, 2025
  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    Fortra GoAnywhere MFT
    KEV Feb 10, 2023