Ws Ftp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:progress_software_corporation:ws_ftp_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Progress Software Corporation (936a4410-8e02-5d5c-938a-4a1509e8d7ef) |
|---|---|
| Product | Ws Ftp Server (e656b659-f1a4-530b-9b33-e349989fdb15) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9999 |
vulnerable | 2026-06-08 07:00:29.055146 |
Multi-Factor Authentication Bypass in Progress WS_FTP Server
MEDIUM (6.5)
In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
Published: 2024-11-12T16:33:00.600Z
Updated: 2024-11-12T17:19:06.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7745 |
vulnerable | 2026-06-08 06:58:23.354693 |
Multi-Factor Authentication Bypass in Progress WS_FTP Server
MEDIUM (6.5)
In WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
Published: 2024-08-28T16:31:03.604Z
Updated: 2024-08-28T17:43:13.099Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7744 |
vulnerable | 2026-06-08 06:58:23.352985 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server
MEDIUM (6.5)
In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, User-Controlled Filename, Path Traversal.
An authenticated file download flaw has been identified where a user can craft an API call that allows them to download a file from an arbitrary folder on the drive where that user host's root folder is located (by default this is C:)
Published: 2024-08-28T16:30:14.787Z
Updated: 2024-08-28T17:50:10.933Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42659 |
vulnerable | 2026-06-08 06:11:08.851700 |
WS_FTP Server Arbitrary File Upload
CRITICAL (9.1)
In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified. An authenticated Ad Hoc Transfer user has the ability to craft an API call which allows them to upload a file to a specified location on the underlying operating system hosting the WS_FTP Server application.
Published: 2023-11-07T15:13:40.001Z
Updated: 2024-09-04T15:24:41.092Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42657 |
vulnerable | 2026-06-08 06:11:08.849200 |
WS_FTP Server Directory Traversal
CRITICAL (9.9)
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path. Attackers could also escape the context of the WS_FTP Server file structure and perform the same level of operations (delete, rename, rmdir, mkdir) on file and folder locations on the underlying operating system.
Published: 2023-09-27T14:49:03.093Z
Updated: 2024-09-24T14:19:21.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40049 |
vulnerable | 2026-06-08 06:09:41.116425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40048 |
vulnerable | 2026-06-08 06:09:41.115629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40047 |
vulnerable | 2026-06-08 06:09:41.115241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40046 |
vulnerable | 2026-06-08 06:09:41.114562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40045 |
vulnerable | 2026-06-08 06:09:41.114144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40044 |
vulnerable | 2026-06-08 06:09:41.112588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.