f
filecatalyst
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 13, 2024 to present
4
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
43/100
medium
Severity Distribution
Critical
1High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
1
2
Path Traversal
1
Most Affected Products
1. FileCatalyst Direct3
2. FileCatalyst Workflow2
3. Fortra Filecatalyst Direct2
4. Fortra FileCatalyst Workflow2
Recent Vulnerabilities
See more →CVE-2024-5275
CVSS 7.8EPSS 0%high
Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)
Jun 18, 2024🔧 No Patch
CVE-2024-25155
CVSS 7.2EPSS 0%high
Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier
Mar 13, 2024
CVE-2024-25154
CVSS 5.3EPSS 0%medium
Path Traversal in FileCatalyst Direct 3.8.8 and Earlier
Mar 13, 2024
CVE-2024-25153
CVSS 9.8EPSS 0%critical
Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114
Mar 13, 2024
Monitor filecatalyst in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.