Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Fortra — Vulnerabilities & Security Advisories 47

Browse all 47 CVE security advisories affecting Fortra. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Fortra, formerly part of DigiCert, specializes in identity governance and privileged access management solutions, primarily serving enterprise environments requiring strict control over administrative credentials. The company’s software portfolio has historically been associated with a significant volume of security flaws, currently totaling 34 Common Vulnerabilities and Exposures (CVEs). These vulnerabilities predominantly involve remote code execution and cross-site scripting, often stemming from insufficient input validation or improper access controls within web-based administrative interfaces. While specific major public breaches directly attributed to Fortra products remain limited in widespread reporting, the high count of disclosed CVEs indicates persistent challenges in securing legacy codebases and complex privilege escalation mechanisms. Security analysts recommend rigorous patch management and network segmentation to mitigate risks associated with these known weaknesses, ensuring that privileged access tools do not become entry points for broader infrastructure compromise.

CVE ID Title CVSS Severity Published
CVE-2024-6632 SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) — FileCatalyst Workflow CWE-89 7.2 High 2024-08-27
CVE-2024-6633 Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) — FileCatalyst Workflow CWE-200 9.8 Critical 2024-08-27
CVE-2024-25157 Authentication bypass in GoAnywhere MFT prior to 7.6.0 — GoAnywhere MFT CWE-303 6.5 Medium 2024-08-14
CVE-2024-5276 SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier) — FileCatalyst Workflow CWE-20 9.8 Critical 2024-06-25
CVE-2024-5275 Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) — FileCatalyst Direct CWE-259 7.8 High 2024-06-18
CVE-2024-4332 Improper Authentication in Tripwire Enterprise 9.1.0 APIs — Tripwire Enterprise CWE-303 8.1AI High AI 2024-06-03
CVE-2024-0259 Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04 — Robot Schedule Enterprise Agent CWE-276 7.3 High 2024-03-28
CVE-2024-25156 Path traversal in GoAnywhere MFT 7.4.1 and Earlier — GoAnywhere MFT CWE-22 6.5 Medium 2024-03-14
CVE-2024-25155 Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier — FileCatalyst CWE-79 7.2 High 2024-03-13
CVE-2024-25154 Path Traversal in FileCatalyst Direct 3.8.8 and Earlier — FileCatalyst CWE-22 5.3 Medium 2024-03-13
CVE-2024-25153 Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114 — FileCatalyst CWE-472 9.8 Critical 2024-03-13
CVE-2024-0204 Authentication Bypass in GoAnywhere MFT — GoAnywhere MFT CWE-425 9.8 Critical 2024-01-22
CVE-2023-6253 Saved Uninstall Key in Digital Guardian Agent Uninstaller — Digital Guardian Agent CWE-922 7.8AI High AI 2023-11-22
CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure — Globalscape EFT CWE-200 5.3 - 2023-06-22
CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service — Globalscape EFT CWE-400 7.5 - 2023-06-22
CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read — Globalscape EFT CWE-125 9.8 - 2023-06-22
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection — Goanywhere MFT CWE-502 8.8 - 2023-02-06

This page lists every published CVE security advisory associated with Fortra. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.