CVE Tools
Track your stack

Fortra

5 CVEs tracked since 2024. Since Mar 2024, none of them reached CISA KEV.

Fortra CVEs per month

Mar 2024 to Mar 2024. Point at a month, or focus the strip and use the arrow keys.
Fortra CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0350

Products

The products that kept showing up in Fortra's monthly top three, with their CVEs summed over those months.

  1. Filecatalyst31 month
  2. Filecatalyst Direct21 month
  3. Filecatalyst Workflow11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Fortra.

  1. CVE-2026-15913Path Traversal in Fortra's GoAnywhere MFT Endpoint7.7
  2. CVE-2026-12164Privilege Escalation in Fortra File Integrity Monitoring (FIM)4.4
  3. CVE-2026-12163Stored XSS in Fortra File Integrity Monitoring (FIM)5.5
  4. CVE-2026-9863Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability7.5
  5. CVE-2026-9862Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability9.8
  6. CVE-2026-1089User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups6.5
  7. CVE-2026-0972HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT5.4
  8. CVE-2026-0971GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout4.3
  9. CVE-2025-14362GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances7.3
  10. CVE-2025-1241Encryption vulnerable to brute-force decryption in GoAnywhere MFT5.8
  11. CVE-2025-13532Weak Password Hash in Core Privileged Access Manager (BoKS)6.2
  12. CVE-2025-8148CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFT4.2
  13. CVE-2025-10035Deserialization Vulnerability in GoAnywhere MFT's License Servlet10.0
  14. CVE-2025-8450Unrestricted File Upload in FileCatalyst8.2
  15. CVE-2025-3871Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier5.3

The record

Peak rank
#154 in Mar 2024
Busiest month shown
Mar 2024, 5 CVEs
Months with a KEV entry
0 since Mar 2024
Monthly snapshots
1 since 2024
Fortra's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store