← Back

Accellion

accellion

65 CVEs • 8 products

Products (8)

Click to collapse
Toggle

CVEs (65)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Accellion
1Secure File Transfer Appliance
Apr 29, 2026
Feb 19, 2010
N/A· v4
N/A· v3
9.0 HIGH· v2
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a req...Show more
Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.Show less
1Accellion
1Secure File Transfer Appliance
Apr 29, 2026
Feb 19, 2010
N/A· v4
N/A· v3
7.8 HIGH· v2
Directory traversal vulnerability in web_client_user_guide.html in Accellion Secure File Transfer Appliance before 8_0_105 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
1Accellion
1Secure File Transfer Appliance
Apr 29, 2026
Feb 19, 2010
N/A· v4
N/A· v3
9.0 HIGH· v2
Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrat...Show more
Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.Show less
1Accellion
1Secure File Transfer Appliance
Apr 23, 2026
Aug 19, 2009
N/A· v4
N/A· v3
7.8 HIGH· v2
courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified d...Show more
courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters.Show less
1Accellion
1Secure File Transfer Appliance
Apr 23, 2026
Aug 27, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Accellion File Transfer FTA_7_0_135 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to courier/forgot_password.html.