FD
Product
FileCatalyst Direct
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add FileCatalyst Direct to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5275 | 7.8 | Jun 18 | Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) Affected: 3.7 through 3.8.10.138 |
| CVE-2024-25155 | 6.1 | Mar 13 | In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the web server does not properly sanitize illegal characters in a URL which is then displayed on a subsequent error page Affected: 3.0.0 before 3.8.9 |
| CVE-2024-25154 | 5.3 | Mar 13 | Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the… Affected: 3.0.0 before 3.8.9 |
Showing 3