Advisories · Technology
Progress ShareFile Storage Zones Controller.
Every CVE that names Progress ShareFile Storage Zones Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService
- Progress ShareFile Storage Zones Controller
- Path traversal
- CVSS 4.0 Medium
Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller
- Progress ShareFile Storage Zones Controller
- Hard-coded credentials
- Race condition
- CVSS 6.5 Medium
Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller
- Progress ShareFile Storage Zones Controller
- Authentication bypass
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller
- Progress ShareFile Storage Zones Controller
- Path traversal
- Unrestricted file upload
- CVSS 8.0 High
Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
- Progress ShareFile Storage Zones Controller
- Insecure deserialization
- CVSS 7.2 High
Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution
- Progress ShareFile Storage Zones Controller
- Path traversal
- CWE-20
- CVSS 8.7 High
Path traversal in Progress ShareFile Storage Zones Controller (SZC)
- Progress ShareFile Storage Zones Controller
- Path traversal
- CWE-20
- CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)
- Progress ShareFile Storage Zones Controller
- Command injection
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)
- Progress ShareFile Storage Zones Controller
- Broken access control
- CWE-698