Vulnerabilidades en Fortra
47 resultadosCVE-2025-3871MEDIUMBroken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlierEPSS 0.4%CVE-2026-79896HIGHFortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerabilityEPSS 0.3%CVE-2024-9945MEDIUMLimited Information Disclosure in GoAnywhere MFT Prior to 7.7.0EPSS 0.3%CVE-2023-6253—Saved Uninstall Key in Digital Guardian Agent UninstallerEPSS 0.3%CVE-2024-0259HIGHPrivilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04EPSS 0.3%CVE-2025-8450HIGHUnrestricted File Upload in FileCatalystEPSS 0.3%CVE-2025-0049LOWDisclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0EPSS 0.3%CVE-2026-79901CRITICALPredictable Active Directory service-account passwords in BoKS ManagerEPSS 0.3%CVE-2026-12163MEDIUMStored XSS in Fortra File Integrity Monitoring (FIM)EPSS 0.2%CVE-2026-79900MEDIUMHeap overflow in KSL checksum initializationEPSS 0.2%CVE-2024-11922MEDIUMInput Validation vulnerability in Web Client emails that do not go through Secure MailEPSS 0.2%CVE-2026-1089MEDIUMUser‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS LookupsEPSS 0.2%CVE-2026-14316HIGHHeap buffer overflow in boks_sshd revoked-key error handlingEPSS 0.2%CVE-2024-11923MEDIUMSensitive Information Disclosure in Fortra Application Hub Prior to version 1.3EPSS 0.2%CVE-2025-14362HIGHGoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain CircumstancesEPSS 0.2%CVE-2026-0971MEDIUMGoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeoutEPSS 0.2%CVE-2024-8264MEDIUMSensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05EPSS 0.2%CVE-2025-8148MEDIUMCVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFTEPSS 0.2%CVE-2026-0972MEDIUMHTML Injection possible in system generated emails in Fortra's GoAnywhere MFTEPSS 0.2%CVE-2026-9864MEDIUMFortra BoKS Server Agent adjoin machine-account password generation vulnerabilityEPSS 0.1%