accellion file transfer appliance

Name: accellion file transfer appliance
Brand: accellion

productUS

cpe:2.3:a:accellion:file_transfer_appliance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical4high7medium0low

updated 2026-10-27

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-2857US	critical9.8	84.2% (100th)	Exploit	no fix	2017-08-22	≤ 9_11_200
CVE-2015-2856US	high7.5	56.6% (99th)	Exploit	no fix	2017-10-10	≤ fta_9_11_200
CVE-2017-8760US	medium6.1	1.23% (69th)	Exploit	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8303US	critical9.8	24.2% (98th)	—	9_12_180	2017-05-05	< 9_12_180
CVE-2016-2352US	high8.8	5.38% (93rd)	—	no fix	2016-05-07	≤ 9_11_210
CVE-2017-8794US	critical10.0	1.90% (80th)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2016-2351US	critical9.8	1.58% (75th)	—	no fix	2016-05-07	≤ 9_11_210
CVE-2019-5623US	critical9.8	1.58% (75th)	—	no fix	2020-04-29	= 8_0_540
CVE-2017-8790US	critical9.8	1.37% (72nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8796US	critical9.8	1.16% (67th)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8789US	critical9.8	1.16% (67th)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2019-5622US	critical9.8OT elevated	1.10% (66th)	—	no fix	2020-04-29	= 8_0_540
CVE-2016-2350US	medium6.1	0.94% (61st)	—	no fix	2016-05-07	≤ 9_11_210
CVE-2017-8795US	medium6.1	0.68% (52nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8792US	medium6.1	0.68% (52nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8791US	medium6.1	0.68% (52nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8788US	medium6.1	0.68% (52nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8304US	medium6.1	0.68% (52nd)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2017-8793US	high8.8	0.51% (44th)	—	no fix	2017-05-05	≤ 9_12_40
CVE-2016-2353US	high7.8	0.47% (41st)	—	no fix	2016-05-07	≤ 9_11_210

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-264CWE-2642 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-346Origin Validation Error1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.