Skip to content
OpenAdvisories

Vendor

Fortra

47 known vulnerabilities.

Products

GoAnywhere MFT 15 Core Privileged Access Manager (BoKS) 6 FileCatalyst 4 FileCatalyst Workflow 4 Globalscape EFT 3 BoKS Manager 3 File Integrity Monitoring (FIM) 2 Digital Guardian Agent 2 BoKS Manager boks-server 2 Robot Schedule Enterprise 1 Fortra's Core Privileged Access Manager (BoKS) 1 Fortra Application Hub 1 Tripwire Enterprise 1 Robot Schedule Enterprise Agent 1 FileCatalyst Direct 1 GoAnywhere 1 Tripwire 0 File Integrity Monitoring 0 GoAnywhere MFT > 6.0.1 0 GoAnywhere MFT < 7.4.1 0
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • Critical 9.8
    CVE-2024-25153 Public exploit EPSS 42%

    Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

    A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web …

    Fortra FileCatalyst
  • Critical 9.8
    CVE-2024-0204 Public exploit Scanner template EPSS 95%

    Authentication Bypass in GoAnywhere MFT

    Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

    Fortra GoAnywhere MFT
  • Unscored —
    CVE-2023-6253

    Saved Uninstall Key in Digital Guardian Agent Uninstaller

    A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file.

    Fortra Digital Guardian Agent
  • Unscored —
    CVE-2023-2991

    Fortra Globalscape Administration Server Information Disclosure

    Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message

    Fortra Globalscape EFT
  • Unscored —
    CVE-2023-2990

    Fortra Globalscape Administration Server Denial of Service

    Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service

    Fortra Globalscape EFT
  • Unscored —
    CVE-2023-2989

    Fortra Globalscape Administration Server Out of Bounds Memory Read

    Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited

    Fortra Globalscape EFT
  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    Fortra GoAnywhere MFT
    KEV Feb 10, 2023