📦

ftp_server

Vendor: accellion

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 6.60% Exploit Prob.
Latest CVE CVE-2016-9500 Jul 13

Security Vulnerability Index

Page 1 / 1
6.1 CVSS
CVE-2016-9500

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

EPSS: 5.43%
5.3 CVSS
CVE-2016-9499

Accellion FTP server prior to version FTA_9_12_220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them.

EPSS: 7.77%