Fta vulnerabilities

4 known vulnerabilities in Fta from Accellion. 4 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Accellion FTA OS Command Injection Exploited

  CVE-2021-27104Feb 16, 2021AccellionEPSS 46.2%

  Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.

• 9.8 Critical severity

  Accellion FTA Server-Side Request Forgery (SSRF) Exploited

  CVE-2021-27103Feb 16, 2021AccellionEPSS 8.18%

  Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.

• 7.8 High severity

  Accellion FTA OS Command Injection Exploited

  CVE-2021-27102Feb 16, 2021AccellionEPSS 2.68%

  Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later.

• 9.8 Critical severity

  Accellion FTA SQL Injection Exploited

  CVE-2021-27101Feb 16, 2021AccellionEPSS 4.28%

  Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.