Advisories · Technology
Fortra FileCatalyst Workflow.
Every CVE that names Fortra FileCatalyst Workflow among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
- Fortra FileCatalyst Workflow
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
- Fortra FileCatalyst Workflow
- Information disclosure
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)
- Fortra FileCatalyst Workflow
- SQL injection
- CWE-20
- CVSS 7.8 High
Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)
- Fortra FileCatalyst Direct
- Fortra FileCatalyst Workflow
- Hard-coded credentials