Skip to content
OpenAdvisories

Product · Fortra

FileCatalyst Workflow

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-6632

    SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

    A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.

    Fortra FileCatalyst Workflow
  • High 7.8
    CVE-2024-5275

    Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)

    A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which contents may be read out, for example, the private key for certificates. Exploit of this vulnerability could lead to a machine-in-the-midd…

    Fortra FileCatalyst Workflow FileCatalyst Direct