Fortra

Deserialization Vulnerability in GoAnywhere MFT's License Servlet

In CISA KEVRansomware

Fortra GoAnywhere MFT License Response Servlet Command Injection

In CISA KEVRansomware

SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)

Authentication Bypass in GoAnywhere MFT

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability

Fortra BoKS Manager crlserver command injection vulnerability

Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability

Predictable Active Directory service-account passwords in BoKS Manager

Fortra Delivernow: SQL Injection

Fortra Globalscape Administration Server Out of Bounds Memory Read

also in 1 other product

Path Traversal in Fortra's GoAnywhere MFT Endpoint

Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

Improper Authentication in Tripwire Enterprise 9.1.0 APIs

Heap buffer overflow in boks_sshd revoked-key error handling

Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability

Fortra Globalscape Administration Server Denial of Service

also in 1 other product

Heap overflow in KSL checksum initialization

SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

Unrestricted File Upload in FileCatalyst

Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances

Authentication bypass in GoAnywhere MFT prior to 7.6.0