Skip to main content

FTA vulnerabilities

4 published alerts for Accellion FTA.

Actively exploited (KEV)Ransomware

CVE-2021-27104

Accellion FTA OS Command Injection Vulnerability

Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27104). Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2021-27103

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27103). Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2021-27102

Accellion FTA OS Command Injection Vulnerability

Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27102). Accellion FTA contains an OS command injection vulnerability exploited via a local web service call. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2021-27101

Accellion FTA SQL Injection Vulnerability

Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27101). Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.