Advisories · Technology
Progress Software WS_FTP Server.
Every CVE that names Progress Software WS_FTP Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.6 Medium
Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Code injection
- CVSS 5.3 Medium
Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Path traversal
- CVSS 5.3 Medium
Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Denial of service
- CVSS 7.5 High
Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Memory corruption
- CWE-20
- CVSS 9.9 CriticalCritical · CVSS 9+
OS Command Injection in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Command injection
- CVSS 8.1 High
Improper Access Control of Web Admin Console in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Virtual Folder Path Confinement Bypass in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Path traversal
- Unrestricted file upload
- CVSS 9.0 CriticalCritical · CVSS 9+
Command Injection via FTP Notification Variables in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Host Administrator Path Containment Bypass in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Path traversal
- Unrestricted file upload
- CVSS 9.1 CriticalCritical · CVSS 9+
Privilege Escalation via Missing Authorization in WS_FTP Manager
- Progress Software WS_FTP Server
- Broken access control
- CVSS 4.3 Medium
Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Authentication bypass
- CWE-308
- CVSS 6.6 Medium
Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server
- Progress Software WS_FTP Server
- Hard-coded credentials
- Information disclosure
- CVSS 6.8 Medium
SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Authentication bypass
- CVSS 10.0 CriticalCritical · CVSS 9+
Improper Authentication in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Authentication bypass
- Hard-coded credentials
- CVSS 7.7 High
Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Path traversal