Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2026-84295

Improper Authentication in Progress WS_FTP Server

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Ws Ftp Server Ws Ftp Server
CVE-2024-9999

Multi-Factor Authentication Bypass in Progress WS_FTP Server

In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Progress Software
Products
Ws Ftp Server