Known vulnerabilities in WS_FTP

Known vulnerabilities in WS_FTP

Vendor: Progress Software Corporation

Software: WS_FTP

Software CPE: cpe:2.3:a:progress_software_corporation:ws_ftp:*:*:*:*:*:*:*:*

Website: https://www.progress.com/

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU96634 - Improper Authentication CVE-2024-7745	CWE-287	Low	No	No	8.8.8	30.08.2024	SB2024083019
#VU96633 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-7744	CWE-22	Low	No	No	8.8.8	30.08.2024	SB2024083019
#VU81281 - Exposure of sensitive information to an unauthorized actor CVE-2023-40049	CWE-200	Low	No	No	8.8.2	29.09.2023	SB2023092921
#VU81280 - Cross-Site Request Forgery (CSRF) CVE-2023-40048	CWE-352	Medium	No	No	8.8.2	29.09.2023	SB2023092921
#VU81279 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40047	CWE-79	Low	No	No	8.8.2	29.09.2023	SB2023092921
#VU81278 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-40046	CWE-89	Medium	No	No	8.7.4, 8.8.2	29.09.2023	SB2023092921
#VU81277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40045	CWE-79	Low	No	No	8.7.4, 8.8.2	29.09.2023	SB2023092921
#VU81276 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-42657	CWE-22	Medium	No	No	8.7.4, 8.8.2	29.09.2023	SB2023092921
#VU81274 - Deserialization of Untrusted Data CVE-2023-40044	CWE-502	Critical	Available	Exploited	8.7.4, 8.8.2	29.09.2023	SB2023092921
#VU68385 - Security Features CVE-2022-27665	CWE-254	Medium	No	No	8.7.4, 8.8.2	18.10.2022	SB2022101819 SB2022101821 SB2022101822 and 1 more