Approved changes feed: RSS · Atom

cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAccellion (430c74a2-9aef-5e49-8a90-6fd4ceee7fe4)
ProductFile Transfer Appliance (a8bf72e9-2c49-5749-b793-90bb848fdde9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5623 vulnerable 2026-06-08 05:14:07.884386 Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')
Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection').
Published: 2020-04-29T22:15:29.271Z
Updated: 2024-09-16T20:48:06.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5622 vulnerable 2026-06-08 05:14:07.883182 Accellion File Transfer Appliance Use of Hard-coded Credentials
Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.
Published: 2020-04-29T22:15:28.858Z
Updated: 2024-09-16T18:55:28.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8796 vulnerable 2026-06-08 05:10:08.902344 Details available
An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/courier/communication_p2p.php allows SQL injection with the app_id parameter.
Published: 2017-05-05T18:00:00.000Z
Updated: 2024-08-05T16:48:21.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8795 vulnerable 2026-06-08 05:10:08.902080 Details available
An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with the param parameter.
Published: 2017-05-05T18:00:00.000Z
Updated: 2024-08-05T16:48:21.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8794 vulnerable 2026-06-08 05:10:08.901825 Details available
An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwd#https:// URL pattern.
Published: 2017-05-05T18:00:00.000Z
Updated: 2024-08-05T16:48:21.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8793 vulnerable 2026-06-08 05:10:08.901556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8792 vulnerable 2026-06-08 05:10:08.901300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8791 vulnerable 2026-06-08 05:10:08.901032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8790 vulnerable 2026-06-08 05:10:08.900776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8789 vulnerable 2026-06-08 05:10:08.900489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8788 vulnerable 2026-06-08 05:10:08.900098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8760 vulnerable 2026-06-08 05:10:08.859726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8304 vulnerable 2026-06-08 05:10:08.033373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8303 vulnerable 2026-06-08 05:10:08.032898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2353 vulnerable 2026-06-08 05:07:42.026213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2352 vulnerable 2026-06-08 05:07:42.025879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2351 vulnerable 2026-06-08 05:07:42.025573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2350 vulnerable 2026-06-08 05:07:42.025143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2857 vulnerable 2026-06-08 05:06:36.049295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2856 vulnerable 2026-06-08 05:06:36.048837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.