Rejetto Http File Server — known CVE vulnerabilities

Every CVE whose affected-product data names Rejetto Http File Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-39943 — CVSS 9.9 (critical): rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote authenticated users (if…
• CVE-2014-6287 — CVSS 9.8 (critical) — actively exploited: The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote…
• CVE-2024-23692 — CVSS 9.8 (critical) — actively exploited: Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows…
• CVE-2014-7226 — CVSS 7.5 (high): The file comment feature in Rejetto HTTP File Server (hfs) 2.3c and earlier allows remote attackers to execute arbitrary code by uploading…
• CVE-2020-13432 — CVSS 7.5 (high): rejetto HFS (aka HTTP File Server) v2.3m Build #300, when virtual files or folders are used, allows remote attackers to trigger an…