Vulnerabilities (CVE)

Filtered by vendor Fortra Subscribe
Filtered by product Goanywhere Managed File Transfer
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-0204 1 Fortra 1 Goanywhere Managed File Transfer 2024-02-02 N/A 9.8 CRITICAL
Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.
CVE-2023-0669 1 Fortra 1 Goanywhere Managed File Transfer 2023-12-10 N/A 7.2 HIGH
Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.