Fortra Filecatalyst vulnerabilities

• fortra filecatalyst Unrestricted File Upload in FileCatalyst CVE-2025-8450 8.2 HighAugust 19, 2025
• fortra filecatalyst workflow SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) CVE-2024-6632 7.2 HighAugust 27, 2024
• fortra filecatalyst workflow Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) CVE-2024-6633 9.8 CriticalAugust 27, 2024
• fortra filecatalyst, filecatalyst workflow +1 more SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier) CVE-2024-5276 EPSS 90.1% 9.8 CriticalJune 25, 2024
• fortra filecatalyst direct, filecatalyst workflow +1 more Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) CVE-2024-5275 7.8 HighJune 18, 2024
• fortra filecatalyst, filecatalyst direct +1 more Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier CVE-2024-25155 7.2 HighMarch 13, 2024
• fortra filecatalyst, filecatalyst direct +1 more Path Traversal in FileCatalyst Direct 3.8.8 and Earlier CVE-2024-25154 5.3 MediumMarch 13, 2024
• fortra filecatalyst, filecatalyst workflow +1 more Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114 CVE-2024-25153 Public exploit EPSS 41.7% 9.8 CriticalMarch 13, 2024