Progress Software Corporation WS_FTP Server vulnerabilities

28 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited Progress Software Corporation WS_FTP Server vulnerabilities

CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CVE-2024-7745 — Multi-Factor Authentication Bypass in Progress WS_FTP Server (CVSS 8.1)
CVE-2024-7744 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server (CVSS 6.5)
CVE-2024-1474 — WS_FTP Server Reflected Cross-Site Scripting in Administrative Interface (CVSS 6.1)
CVE-2023-42659 — WS_FTP Server Arbitrary File Upload (CVSS 8.8)
CVE-2023-42657 — WS_FTP Server Directory Traversal (CVSS 9.6)
CVE-2023-40049 — WS_FTP Server Information Disclosure via Directory Listing (CVSS 5.3)
CVE-2023-40048 — WS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability (CVSS 6.5)
CVE-2023-40047 — WS_FTP Server Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
CVE-2023-40046 — WS_FTP Server SQL Injection via Administrative Interface (CVSS 7.2)
CVE-2023-40045 — WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability (CVSS 6.1)
CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability (CVSS 8.8) — exploited
CVE-2022-27665 — (CVSS 6.1)
CVE-2023-24029 — (CVSS 7.2)
CVE-2019-12143 — (CVSS 5.3)
CVE-2008-0590 — (CVSS 9.0)
CVE-2006-5001 — (CVSS 5.0)
CVE-2006-5000 — (CVSS 6.5)
CVE-2006-4847 — (CVSS 6.5)
CVE-2004-1885 — (CVSS 7.2)
CVE-2004-1883 — (CVSS 7.2)
CVE-2004-1848 — (CVSS 5.0)
CVE-2004-1643 — (CVSS 5.0)
CVE-2004-1884 — (CVSS 7.5)
CVE-2003-0772 — (CVSS 7.5)
CVE-2002-0826 — (CVSS 7.5)