Advisories · Technology

Fortra FileCatalyst.

Every CVE that names Fortra FileCatalyst among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-8450 CVE record

CVSS 8.2 High

Unrestricted File Upload in FileCatalyst
- Fortra FileCatalyst
- Authentication bypass
- Unrestricted file upload
Not analysed yet 19 Aug 2025
CVE-2024-25155 CVE record

CVSS 7.2 High

Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier
- Fortra FileCatalyst
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2024-25154 CVE record

CVSS 5.3 Medium

Path Traversal in FileCatalyst Direct 3.8.8 and Earlier
- Fortra FileCatalyst
- Path traversal
Not analysed yet 13 Mar 2024
CVE-2024-25153 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
- Fortra FileCatalyst
- CWE-472
Not analysed yet 13 Mar 2024