FileCatalyst vulnerabilities

3 known vulnerabilities in FileCatalyst from Fortra. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  FileCatalyst: Missing Authentication for Critical Functionality

  CVE-2025-8450Aug 19, 2025Fortra

  Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page.

• 9.1 Critical severity

  FileCatalyst Workflow: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-5276Jun 25, 2024FortraEPSS 90.1%

  A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL inj

• 9.8 Critical severity

  FileCatalyst: Exposure of Resource to Wrong Sphere

  CVE-2024-25153Mar 13, 2024FortraEPSS 41.7%

  A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web p