Skip to content
Fortra vulnerabilities
Newest
-
fortra core privileged access manager (boks)
Heap buffer overflow in boks_sshd revoked-key error handling
CVE-2026-14316
8.1 High
-
fortra core privileged access manager (boks)
Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
CVE-2026-9864
4.8 Medium
-
fortra fortra's core privileged access manager (boks)
Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
CVE-2026-12627
9.8 Critical
-
fortra boks manager
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
CVE-2026-79896
7.5 High
-
fortra boks manager
Fortra BoKS Manager crlserver command injection vulnerability
CVE-2026-79898
9.1 Critical
-
fortra boks manager
Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
CVE-2026-79899
7.9 High
-
fortra boks manager boks-server
Heap overflow in KSL checksum initialization
CVE-2026-79900
6.5 Medium
-
fortra boks manager boks-server
Predictable Active Directory service-account passwords in BoKS Manager
CVE-2026-79901
9.9 Critical
-
fortra goanywhere mft
Path Traversal in Fortra's GoAnywhere MFT Endpoint
CVE-2026-15913
7.7 High
-
fortra file integrity monitoring (fim), file integrity monitoring +1 more
Privilege Escalation in Fortra File Integrity Monitoring (FIM)
CVE-2026-12164
4.4 Medium
-
fortra file integrity monitoring (fim), file integrity monitoring +1 more
Stored XSS in Fortra File Integrity Monitoring (FIM)
CVE-2026-12163
5.5 Medium
-
fortra core privileged access manager (boks), core privileged access manager server +1 more
Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability
CVE-2026-9863
7.5 High
-
fortra core privileged access manager (boks), core privileged access manager server +1 more
Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability
CVE-2026-9862
9.8 Critical
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups
CVE-2026-1089
6.5 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT
CVE-2026-0972
5.4 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout
CVE-2026-0971
4.3 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances
CVE-2025-14362
7.3 High
-
fortra goanywhere mft, goanywhere agents, goanywhere managed file transfer +2 more
Encryption vulnerable to brute-force decryption in GoAnywhere MFT
CVE-2025-1241
5.8 Medium
-
fortra core privileged access manager (boks)
Weak Password Hash in Core Privileged Access Manager (BoKS)
CVE-2025-13532
6.2 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFT
CVE-2025-8148
4.2 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVE-2025-10035
In KEVPublic exploit
EPSS 99.8%
10.0 Critical
-
fortra filecatalyst
Unrestricted File Upload in FileCatalyst
CVE-2025-8450
8.2 High
-
fortra goanywhere mft
Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier
CVE-2025-3871
5.3 Medium
-
fortra core privileged access manager (boks)
Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache
CVE-2025-5141
5.5 Medium
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Input Validation vulnerability in Web Client emails that do not go through Secure Mail
CVE-2024-11922
6.3 Medium
-
fortra goanywhere, goanywhere managed file transfer +1 more
Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0
CVE-2025-0049
3.5 Low
-
fortra application hub
Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3
CVE-2024-11923
5.5 Medium
-
fortra goanywhere mft
Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0
CVE-2024-9945
5.3 Medium
-
fortra digital guardian agent
USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
CVE-2024-3334
4.3 Medium
-
fortra robot schedule enterprise, robot schedule +1 more
Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05
CVE-2024-8264
5.5 Medium
-
fortra filecatalyst workflow
SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
CVE-2024-6632
7.2 High
-
fortra filecatalyst workflow
Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
CVE-2024-6633
9.8 Critical
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Authentication bypass in GoAnywhere MFT prior to 7.6.0
CVE-2024-25157
6.5 Medium
-
fortra filecatalyst, filecatalyst workflow +1 more
SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)
CVE-2024-5276
EPSS 90.1%
9.8 Critical
-
fortra filecatalyst direct, filecatalyst workflow +1 more
Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)
CVE-2024-5275
7.8 High
-
fortra tripwire enterprise
Improper Authentication in Tripwire Enterprise 9.1.0 APIs
CVE-2024-4332
9.3 Critical
-
fortra robot schedule enterprise agent, robot schedule +1 more
Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04
CVE-2024-0259
7.3 High
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Path traversal in GoAnywhere MFT 7.4.1 and Earlier
CVE-2024-25156
6.5 Medium
-
fortra filecatalyst, filecatalyst direct +1 more
Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier
CVE-2024-25155
7.2 High
-
fortra filecatalyst, filecatalyst direct +1 more
Path Traversal in FileCatalyst Direct 3.8.8 and Earlier
CVE-2024-25154
5.3 Medium
-
fortra filecatalyst, filecatalyst workflow +1 more
Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
CVE-2024-25153
Public exploit
EPSS 41.7%
9.8 Critical
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Authentication Bypass in GoAnywhere MFT
CVE-2024-0204
Public exploit
EPSS 95.1%
9.8 Critical
-
fortra digital guardian agent
Saved Uninstall Key in Digital Guardian Agent Uninstaller
CVE-2023-6253
6.0 Medium
-
fortra delivernow
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems)...
CVE-2021-26837
Public exploit
9.8 Critical
-
fortra globalscape eft, globalscape eft server +1 more
Fortra Globalscape Administration Server Information Disclosure
CVE-2023-2991
5.3 Medium
-
fortra globalscape eft, globalscape eft server +1 more
Fortra Globalscape Administration Server Denial of Service
CVE-2023-2990
7.5 High
-
fortra globalscape eft, globalscape eft server +1 more
Fortra Globalscape Administration Server Out of Bounds Memory Read
CVE-2023-2989
9.1 Critical
-
fortra cobalt strike
Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing...
CVE-2022-42948
In KEV
9.8 Critical
-
fortra goanywhere mft, goanywhere managed file transfer +1 more
Fortra GoAnywhere MFT License Response Servlet Command Injection
CVE-2023-0669
In KEVPublic exploit
EPSS 100.0%
7.2 High
-
fortra cobalt strike
An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7...
CVE-2022-39197
In KEVPublic exploit
EPSS 44.1%
6.1 Medium