CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-02-16
Accellion FTA Host Header SQL Injection Vulnerability (CVE-2021-27101) Technical Advisory
[Affected Scope] Accellion FTA versions 9_12_370 and earlier
[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via a crafted Host header, leading to sensitive data exposure or potential remote code execution (RCE)
[Mitigation] Immediately upgrade Accellion FTA to version 9_12_380 or later and restrict external access