Known vulnerabilities in WinSCP

Software: WinSCP
Software CPE: cpe:2.3:a:winscp_sourceforge_net:winscp:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WinSCP WinSCP is affected by 8 known vulnerabilities: 1 high, 2 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88542 - Cryptographic Issues
CVE-2024-31497
CWE-310 Medium
Available
No
6.3.3 15.04.2024 SB2024041563
SB2024041565
SB2024041566
and 9 more
#VU50281 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3331
CWE-94 High
No
No
5.17.10 27.01.2021 SB2021020310
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109
CWE-451 Low
No
No
5.14 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16989 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6110
CWE-451 Low
Available
No
5.14 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 3 more
#VU16988 - Improper input validation
CVE-2019-6111
CWE-20 Low
Available
No
5.14 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16945 - Improper input validation
CVE-2018-20684
CWE-20 Low
No
No
5.14 beta 11.01.2019 SB2019011021
#VU16946 - Improper Access Control
CVE-2018-20685
CWE-284 Low
No
No
5.14 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU41778 - Improper input validation
CVE-2014-2735
CWE-20 Medium
No
No
- 22.04.2014 SB2014042205