Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium5.4HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.Check if you run itEPSS 0.15%Apr 21, 2026
- Medium4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page in…Check if you run itEPSS 0.18%Apr 21, 2026
- Medium4.9Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-…Check if you run itEPSS 0.13%Apr 21, 2026
- High7.3The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in wi…Check if you run itEPSS 0.19%Apr 21, 2026
- UnknownFortra filecatalyst_workflow Improper Input ValidationPatch nowKEVEPSS 90.07%Oct 17, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.80%Sep 18, 2025
- UnknownFortra GoAnywhere MFT Direct Request ('Forced Browsing')Patch nowKEVEPSS 95.09%Jan 25, 2024
- Critical9.8Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.71%Mar 24, 2023
- High7.2Fortra GoAnywhere MFT Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Feb 6, 2023
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 46.45%Sep 21, 2022
11 records · page 1 of 1
PreviousNext