Cerberusftp Ftp_server
10 CVEs affecting Cerberusftp Ftp_server. Latest disclosed: 2026-04-27. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6265 | High | 8.8 | 2026-04-27 | Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus F… |
CVE-2020-5196 | High | 8.1 | 2020-01-14 | Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list direct… |
CVE-2017-6367 | High | 7.5 | 2017-03-14 | In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid… |
CVE-2019-25046 | Medium | 6.1 | 2021-06-10 | The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document. |
CVE-2020-5195 | Medium | 6.1 | 2020-01-13 | Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HT… |
CVE-2020-5194 | Medium | 5.4 | 2020-01-14 | The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endp… |
CVE-2012-6339 | | 2012-12-31 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inj… | |
CVE-2012-5301 | | 2012-10-04 | The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote attackers to obtain… | |
CVE-2012-2999 | | 2012-10-04 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the auth… | |
CVE-2004-2769 | | 2010-07-02 | Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1)… |