CVE Catalog

CVE-2017-8789

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered on Accellion FTA devices before FTA_9_12_180 related to an SQL injection vector via report_error.php?year='payload.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, posing a serious threat to the confidentiality and integrity of the organization's data.

Recommendation

It is recommended to update Accellion FTA devices to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

An issue was discovered on Accellion FTA devices before FTA_9_12_180. A report_error.php?year='payload SQL injection vector exists.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS