Accellion

Known Exploited Vulnerabilities 4CVEs

4 linked to ransomware campaigns

• CVE-2021-27104FTANov 3, 202156.7% EPSS

  Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

• CVE-2021-27102FTANov 3, 20213.7% EPSS

  Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.

• CVE-2021-27101FTANov 3, 20216.0% EPSS

  Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

• CVE-2021-27103FTANov 3, 202111.4% EPSS

  Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

Additional Info

Sources

bugcrowd