Fortra Filecatalyst Direct — known CVE vulnerabilities

Every CVE whose affected-product data names Fortra Filecatalyst Direct, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-25155 — CVSS 7.2 (high): In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the web server does not properly sanitize illegal characters in a URL which is then…
• CVE-2024-25154 — CVSS 5.3 (medium): Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web…