Skip to content
OpenAdvisories

Product · Fortra

FileCatalyst

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2025-8450

    Unrestricted File Upload in FileCatalyst

    Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page.

    Fortra FileCatalyst
  • High 7.2
    CVE-2024-25155

    Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier

    In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the web server does not properly sanitize illegal characters in a URL which is then displayed on a subsequent error page. A malicious actor could craft a URL which would then execute arbitrary code withi…

    Fortra FileCatalyst