Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Fortra

Fortra FileCatalyst vulnerabilities

4 published CVEs name Fortra FileCatalyst among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20243
  2. 20251

Newest CVEs

  • CVE-2025-8450

    Unrestricted File Upload in FileCatalyst

    Fortra · FileCatalyst

    High8.2
  • CVE-2024-25155

    Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier

    Fortra · FileCatalyst

    High7.2
  • CVE-2024-25154

    Path Traversal in FileCatalyst Direct 3.8.8 and Earlier

    Fortra · FileCatalyst

    Medium5.3
  • CVE-2024-25153

    Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114

    Fortra · FileCatalyst

    Critical9.8

Most common weaknesses

  1. CWE-22 Path traversal1
  2. CWE-306 Missing authentication for a critical function1
  3. CWE-434 Unrestricted file upload1
  4. CWE-472 1
  5. CWE-668 Exposure of a resource to the wrong sphere1
  6. CWE-79 Cross-site scripting (XSS)1