CVE-2017-8790

CRITICAL

Accellion File Transfer Appliance < 9_12_40 - LDAP Injection

Title source: rule
STIX 2.1

Description

An issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier/ldaptest.html POST parameter "filter" can be used for LDAP Injection.

References (1)

Scores

CVSS v3 9.8
EPSS 0.0049
EPSS Percentile 65.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-90
Status published
Products (1)
accellion/file_transfer_appliance < 9_12_40
Published May 05, 2017
Tracked Since Feb 18, 2026