CVE-2016-2351

Critical

Published: 07/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-2351 describes an SQL injection vulnerability in the home/seos/courier/security_key2.api file on the Accellion File Transfer Appliance (FTA) before version FTA_9_12_40. This allows remote attackers to execute arbitrary SQL commands via the client_id parameter.

Risk Assessment

The organization is at risk of unauthorized access to the database, which could lead to the exposure of sensitive information or data manipulation.

Recommendation

It is recommended to update the Accellion FTA device to version FTA_9_12_40 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote attackers to execute arbitrary SQL commands via the client_id parameter.