NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 85598 | CVE-2017-8791 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a home/seos/courier/login.html auth_params CRLF attack vector. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-17 | View | |
| 85599 | CVE-2017-8792 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/user_add.html with the param parameter. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-17 | View | |
| 85600 | CVE-2017-8793 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request to home/seos/courier/web/wmProgressstat.html.php with an attacker domain in the acallow parameter, the device will respond with an Access-Control-Allow-Origin header allowing the attacker to have site access with a bypass of the Same Origin Policy. | 2 | 6.8 | Medium | 2017-05-27 | 2017-05-17 | View | |
| 85601 | CVE-2017-8794 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwd#https:// URL pattern. | 2 | 6.4 | Medium | 2017-05-27 | 2017-05-17 | View | |
| 85602 | CVE-2017-8795 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with the param parameter. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-17 | View |
Page 17539 of 17672, showing 5 records out of 88360 total, starting on record 87691, ending on 87695
