Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
progress ws ftp server vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2023-40045
In WS_FTP Server versions before 8.7.4 and 8.8.2, a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Ad Hoc Transfer module. An attacker could leverage this vulnerability to target WS_FTP Server users with a specialized payload which results in t...
Progress Ws Ftp Server
7.2
CVSSv3
CVE-2023-40046
In WS_FTP Server versions before 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WS_FTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database e...
Progress Ws Ftp Server
4.8
CVSSv3
CVE-2023-40047
In WS_FTP Server version before 8.8.2, a stored cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Management module. An attacker with administrative privileges could import a SSL certificate with malicious attributes containing cross-site scripting payloads...
Progress Ws Ftp Server
6.5
CVSSv3
CVE-2023-40048
In WS_FTP Server version before 8.8.2, the WS_FTP Server Manager interface was missing cross-site request forgery (CSRF) protection on a POST transaction corresponding to a WS_FTP Server administrative function.
Progress Ws Ftp Server
5.3
CVSSv3
CVE-2023-40049
In WS_FTP Server version before 8.8.2, an unauthenticated user could enumerate files under the 'WebServiceHost' directory listing.
Progress Ws Ftp Server
9.6
CVSSv3
CVE-2023-42657
In WS_FTP Server versions before 8.7.4 and 8.8.2, a directory traversal vulnerability exists. An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path. Attackers co...
Progress Ws Ftp Server
8.8
CVSSv3
CVE-2023-42659
In WS_FTP Server versions before 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authenticated Ad Hoc Transfer user has the ability to craft an API call which allows them to upload a file to a specified location on the underlying operating system hostin...
Progress Ws Ftp Server
5.3
CVSSv3
CVE-2019-12143
A Directory Traversal issue exists in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 prior to 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WS_FTP usernames as well as filenames.
Progress Ws Ftp Server
6.1
CVSSv3
CVE-2022-36967
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a remote malicious user to inject arbitrary JavaScript into a WS_FTP administrator's web session. Thi...
Progress Ipswitch Ws Ftp Server
4.3
CVSSv3
CVE-2022-36968
In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.
Progress Ipswitch Ws Ftp Server
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5248
CVE-2024-3110
CVE-2024-5552
CVE-2024-29415
HTML injection
CVE-2024-3095
TCP
type confusion
CVE-2024-1800
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »