[ Vendor · 4 CVEs ]
Accellion
CVEs affecting Accellion published in the last 30 days, plus any Accellion CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2021-27101 | 16 Feb 2021 | CVSS 9.8 | Accellion FTA SQL InjectionAccellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is… | Exploited |
| CVE-2021-27102 | 16 Feb 2021 | CVSS 7.8 | Accellion FTA OS Command InjectionAccellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later. | Exploited |
| CVE-2021-27103 | 16 Feb 2021 | CVSS 9.8 | Accellion FTA Server-Side Request Forgery (SSRF)Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later. | Exploited |
| CVE-2021-27104 | 16 Feb 2021 | CVSS 9.8 | Accellion FTA OS Command InjectionAccellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is… | Exploited |