← Back

Ipswitch Ws Ftp Server

ipswitch_ws_ftp_server

Vendor: Progress • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-36968
1Progress
1Ipswitch Ws Ftp Server
Jun 17, 2026
Aug 2, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.
CVE-2022-36967
1Progress
1Ipswitch Ws Ftp Server
Jun 17, 2026
Aug 2, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScri...Show more
In Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS) vulnerabilities exist in the administrative web interface. It is possible for a remote attacker to inject arbitrary JavaScript into a WS_FTP administrator's web session. This would allow the attacker to execute code within the context of the victim's browser.Show less