What’s Vulnerable › Products

Fortra FileCatalyst vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Fortra FileCatalyst version is affected

Latest Fortra FileCatalyst vulnerabilities

• CVE-2025-8450 — Unrestricted File Upload in FileCatalyst (CVSS 8.2)
• CVE-2024-5275 — Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) (CVSS 7.8)
• CVE-2024-25155 — Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier (CVSS 6.1)
• CVE-2024-25154 — Path Traversal in FileCatalyst Direct 3.8.8 and Earlier (CVSS 5.3)