Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Fortra

Products: FileCatalyst · FileCatalyst Workflow · GoAnywhere MFT

40.6

Score

3

CVEs

1

Active

2

PoC

1

KEV

#69

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-10035	2025-09-18	10.0v3.1	ACTIVE		Low	None	YES	40.6	GoAnywhere MFT	A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.
CVE-2024-5276	2024-06-25	9.8v3.1	POC	—	Low	None	YES	0.0	FileCatalyst Workflow	A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this vulne
CVE-2024-25153	2024-03-13	9.8v3.1	POC	—	Low	None	YES	0.0	FileCatalyst	A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3