Accellion Secure File Transfer Appliance — known CVE vulnerabilities

Every CVE whose affected-product data names Accellion Secure File Transfer Appliance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2009-4644 — CVSS 9.0 (critical): Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and…
• CVE-2009-4646 — CVSS 9.0 (critical): Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote…
• CVE-2009-4645 — CVSS 7.8 (high): Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote…
• CVE-2008-7012 — CVSS 7.8 (high): courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other…
• CVE-2009-4648 — CVSS 7.2 (high): Accellion Secure File Transfer Appliance before 8_0_105 does not properly restrict access to sensitive commands and arguments that run with…
• CVE-2008-3850 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbitrary web script or…
• CVE-2009-4647 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Accellion Secure File Transfer Appliance before 7_0_296 allows remote attackers to inject…