Accellion Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	22
File Transfer Software	20

Product

Accellion FTA	16
Accellion File Transfer Appliance	12
Accellion Secure File Transfer Appliance	8
Accellion Kiteworks	6

Remediation

Official Fix	36
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	6

Exploitability

High	12
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	30

Access Vector

Not Defined	0
Physical	0
Local	6
Adjacent	2
Network	34

Authentication

Not Defined	0
High	2
Low	8
None	32

User Interaction

Not Defined	0
Required	12
None	30

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	8
≤7	6
≤8	8
≤9	12
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	12
≤6	0
≤7	6
≤8	10
≤9	12
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	14
≤6	6
≤7	0
≤8	18
≤9	4
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	10
≤8	6
≤9	2
≤10	14

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	10
<2k	12
<5k	20
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	42
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (6): FTA (18), FTP Server (2), File Transfer Appliance (8), Kiteworks (6), Kiteworks MFT (1), Secure File Transfer Appliance (7)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
02/14/2022	5.5	5.3	Accellion Kiteworks MFT Password access control	Unknown	Not Defined	Official Fix	0.00054	0.02	CVE-2022-24110
06/23/2021	4.2	4.0	Accellion Kiteworks SSH Password Local Privilege Escalation	Unknown	Not Defined	Official Fix	0.00044	0.05	CVE-2021-31585
06/23/2021	6.3	6.0	Accellion Kiteworks LDAPGroup Search sql injection	Unknown	Not Defined	Official Fix	0.00095	0.00	CVE-2021-31586
03/02/2021	4.8	4.6	Accellion FTA User Endpoint cross site scripting	Unknown	Not Defined	Official Fix	0.00078	0.00	CVE-2021-27731
03/02/2021	7.6	7.3	Accellion FTA Admin Endpoint argument injection	Unknown	Not Defined	Official Fix	0.00276	0.00	CVE-2021-27730
02/17/2021	7.6	7.5	Accellion FTA Admin Endpoint os command injection	Unknown	High	Official Fix	0.01328	0.00	CVE-2021-27104
02/17/2021	7.6	7.5	Accellion FTA POST Request wmProgressstat.html server-side request forgery	Unknown	High	Official Fix	0.01217	0.00	CVE-2021-27103
02/17/2021	6.5	6.4	Accellion FTA Web Service os command injection	Unknown	High	Official Fix	0.00083	0.04	CVE-2021-27102
02/17/2021	8.0	7.9	Accellion FTA Host Header document_root.html sql injection	Unknown	High	Official Fix	0.00761	0.04	CVE-2021-27101
04/29/2020	8.5	8.5	Accellion File Transfer Appliance command injection	File Transfer Software	Not Defined	Not Defined	0.00311	0.00	CVE-2019-5623

32 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 32 results.

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!