Login Request a demo
FO
Vendor
Fortra
19 products with CVEs on record
62
CVEs
6
On KEV
8
New 30D
Products
BM
BoKS Manager
Fortra
9.1
3 CVEs0 on KEV3 new
CP
Core Privileged Access Manager (BoKS)
Fortra
9.8
6 CVEs0 on KEV2 new
BM
BoKS Manager boks-server
Fortra
9.9
2 CVEs0 on KEV2 new
FC
Fortra's Core Privileged Access Manager (BoKS)
Fortra
9.8
1 CVEs0 on KEV1 new
GM
GoAnywhere MFT
File Transfer
9.8
14 CVEs2 on KEV0 new
GM
Goanywhere Managed File Transfer
Fortra
9.8
13 CVEs2 on KEV0 new
CS
Cobalt Strike
Fortra
9.8
2 CVEs2 on KEV0 new
FW
FileCatalyst Workflow
Fortra
9.8
4 CVEs0 on KEV0 new
CP
Core Privileged Access Manager Server
Fortra
9.8
2 CVEs0 on KEV0 new
DG
Digital Guardian Agent
Fortra
6.0
2 CVEs0 on KEV0 new
FI
File Integrity Monitoring
Fortra
4.8
2 CVEs0 on KEV0 new
FI
File Integrity Monitoring (FIM)
Fortra
4.8
2 CVEs0 on KEV0 new
FD
Filecatalyst Direct
Fortra
6.1
2 CVEs0 on KEV0 new
RS
Robot Schedule
Fortra
7.3
2 CVEs0 on KEV0 new
DE
Delivernow
Fortra
9.8
1 CVEs0 on KEV0 new
FI
FileCatalyst
Fortra
8.2
1 CVEs0 on KEV0 new
FA
Fortra Application Hub
Fortra
5.5
1 CVEs0 on KEV0 new
GA
Goanywhere Agents
Fortra
4.9
1 CVEs0 on KEV0 new
RS
Robot Schedule Enterprise
Fortra
5.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-14316
CP
Core Privileged Access Manager (BoKS)
Fortra
8.1
0%
Oct 1Heap buffer overflow in boks_sshd revoked-key error handling
CVE-2026-9864
CP
Core Privileged Access Manager (BoKS)
Fortra
4.8
0%
Oct 1Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
CVE-2026-12627
FC
Fortra's Core Privileged Access Manager (BoKS)
Fortra
9.8
0%
Oct 1Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
CVE-2026-79896
BM
BoKS Manager
Fortra
7.5
0%
Oct 1Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
CVE-2026-79898
BM
BoKS Manager
Fortra
9.1
1%
Oct 1Fortra BoKS Manager crlserver command injection vulnerability
CVE-2026-79899
BM
BoKS Manager
Fortra
7.9
0%
Oct 1Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
CVE-2026-79900
BM
BoKS Manager boks-server
Fortra
6.5
0%
Oct 1Heap overflow in KSL checksum initialization
CVE-2026-79901
BM
BoKS Manager boks-server
Fortra
9.9
0%
Oct 1Predictable Active Directory service-account passwords in BoKS Manager
CVE-2026-15913
GM
GoAnywhere MFT
Fortra
7.7
0%
Sep 9Path Traversal in Fortra's GoAnywhere MFT Endpoint
CVE-2026-12164
FI
File Integrity Monitoring (FIM)
Fortra
4.4
0%
Jun 23Privilege Escalation in Fortra File Integrity Monitoring (FIM)
CVE-2026-12163
FI
File Integrity Monitoring (FIM)
Fortra
4.8
0%
Jun 23Stored XSS in Fortra File Integrity Monitoring (FIM)
CVE-2026-9863
CP
Core Privileged Access Manager (BoKS)
Fortra
8.8
1%
Jun 15Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability
CVE-2026-9862
CP
Core Privileged Access Manager (BoKS)
Fortra
9.8
1%
Jun 15Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability
CVE-2026-1089
GM
GoAnywhere MFT
Fortra
6.5
0%
Apr 21User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups
CVE-2026-0972
GM
GoAnywhere MFT
Fortra
5.4
0%
Apr 21HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT
CVE-2026-0971
GM
GoAnywhere MFT
Fortra
4.3
0%
Apr 21GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout
CVE-2025-14362
GM
GoAnywhere MFT
Fortra
7.3
0%
Apr 21GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances
CVE-2025-1241
GM
GoAnywhere MFT
Fortra
4.9
0%
Apr 21Encryption vulnerable to brute-force decryption in GoAnywhere MFT
CVE-2025-13532
CP
Core Privileged Access Manager (BoKS)
Fortra
6.2
0%
Dec 16Weak Password Hash in Core Privileged Access Manager (BoKS)
CVE-2025-8148
GM
GoAnywhere MFT
Fortra
4.2
0%
Dec 5CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFT
CVE-2025-10035
RansomwareIn wildKEV
GM
GoAnywhere MFT
Fortra
9.8
100%
Sep 18Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVE-2025-8450
FI
FileCatalyst
Fortra
8.2
0%
Aug 19Unrestricted File Upload in FileCatalyst
CVE-2025-3871
GM
GoAnywhere MFT
Fortra
5.3
0%
Jul 16Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier
CVE-2025-5141
CP
Core Privileged Access Manager (BoKS)
Fortra
5.5
0%
Jun 17Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache
CVE-2024-11922
GM
GoAnywhere MFT
Fortra
5.4
0%
Apr 28Input Validation vulnerability in Web Client emails that do not go through Secure Mail
CVE-2025-0049
GM
GoAnywhere MFT
Fortra
4.3
0%
Apr 28Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0
CVE-2024-11923
FA
Fortra Application Hub
Fortra
5.5
0%
Jan 17Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3
CVE-2024-9945
GM
GoAnywhere MFT
Fortra
5.3
0%
Dec 13Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0
CVE-2024-3334
DG
Digital Guardian Agent
Fortra
4.3
0%
Nov 15USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
CVE-2024-8264
RS
Robot Schedule Enterprise
Fortra
5.5
0%
Oct 9Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05
CVE-2024-6632
FW
FileCatalyst Workflow
Fortra
7.2
1%
Aug 27SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
CVE-2024-6633
FW
FileCatalyst Workflow
Fortra
9.8
1%
Aug 27Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)
CVE-2024-25157
GM
GoAnywhere MFT
Fortra
6.5
0%
Aug 14Authentication bypass in GoAnywhere MFT prior to 7.6.0
CVE-2024-5276
FW
Filecatalyst Workflow
Fortra
9.1
90%
Jun 25A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data.  Likely impacts include creation of administrative users and deletion…
CVE-2024-0259
RS
Robot Schedule
Fortra
7.3
0%
Mar 28Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation
CVE-2024-25156
GM
Goanywhere Managed File Transfer
Fortra
6.5
0%
Mar 14A path traversal vulnerability exists in GoAnywhere MFT prior to 7.4.2 which allows attackers to circumvent endpoint-specific permission checks in the GoAnywhere Admin and Web…
CVE-2024-25155
FD
Filecatalyst Direct
Fortra
6.1
0%
Mar 13In FileCatalyst Direct 3.8.8 and earlier through 3.8.6, the web server does not properly sanitize illegal characters in a URL which is then displayed on a subsequent error page
CVE-2024-25154
FD
Filecatalyst Direct
Fortra
5.3
0%
Mar 13Improper URL validation leads to path traversal in FileCatalyst Direct 3.8.8 and earlier allowing an encoded payload to cause the web server to return files located outside of the…
CVE-2024-25153
FW
Filecatalyst Workflow
Fortra
9.8
42%
Mar 13A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially…
CVE-2024-0204
GM
Goanywhere Managed File Transfer
Fortra
9.8
95%
Jan 22Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal
CVE-2023-6253
DG
Digital Guardian Agent
Fortra
6.0
0%
Nov 22A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by…
CVE-2021-26837
DE
Delivernow
Fortra
9.8
1%
Sep 19SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate…
CVE-2022-42948
In wildKEV
CS
Cobalt Strike
Fortra
9.8
3%
Mar 24Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVE-2023-0669
RansomwareIn wildKEV
GM
GoAnywhere MFT
Fortra
7.2
100%
Feb 6Fortra GoAnywhere MFT License Response Servlet Command Injection
CVE-2022-39197
In wildKEV
CS
Cobalt Strike
Fortra
6.1
47%
Sep 22Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability