Ipswitch Ws Ftp Server — known CVE vulnerabilities

Every CVE whose affected-product data names Ipswitch Ws Ftp Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2019-12144 — CVSS 9.8 (critical): An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a…
• CVE-2019-12146 — CVSS 9.1 (critical): A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the…
• CVE-2004-1884 — CVSS 7.5 (high): Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
• CVE-2006-4974 — CVSS 7.5 (high): Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a…
• CVE-2003-0772 — CVSS 7.5 (high): Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary…
• CVE-2019-12145 — CVSS 7.5 (high): A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply…
• CVE-2007-0666 — CVSS 6.8 (medium): Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1)…
• CVE-2006-5000 — CVSS 6.5 (medium): Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote…
• CVE-2006-4847 — CVSS 6.5 (medium): Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via…
• CVE-2006-5001 — CVSS 5.0 (medium): Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents…
• CVE-1999-0362 — CVSS 5.0 (medium): WS_FTP server remote denial of service through cwd command.
• CVE-2004-1848 — CVSS 5.0 (medium): Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via…
• CVE-2004-1135 — CVSS 5.0 (medium): Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1)…