FileCatalyst Workflow vulnerabilities
5 known vulnerabilities in FileCatalyst Workflow from Fortra. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
FileCatalyst Workflow: Use of Hard-coded Credentials
The default credentials for the setup HSQL database (HSQLDB) for FileCatalyst Workflow are published in a vendor knowledgebase article. Misuse of these credentials could lead to a compromise of confidentiality, integrity, or availability of the software. The H
- 7.2 High severity
FileCatalyst Workflow: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.
- 9.1 Critical severity
FileCatalyst Workflow: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL inj
- 7.8 High severity
FileCatalyst Direct: Use of Hard-coded Password
A hard-coded password in the FileCatalyst TransferAgent can be found which can be used to unlock the keystore from which contents may be read out, for example, the private key for certificates. Exploit of this vulnerability could lead to a machine-in-the-middl
- 9.8 Critical severity
FileCatalyst: Exposure of Resource to Wrong Sphere
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web p