Vulnerabilities > Progress > WS FTP Server > 8.6.1

DATE CVE VULNERABILITY TITLE RISK
2023-11-07 CVE-2023-42659 Unrestricted Upload of File with Dangerous Type vulnerability in Progress WS FTP Server
In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unrestricted file upload flaw has been identified.
network
low complexity
progress CWE-434
8.8
2023-09-27 CVE-2023-40044 Deserialization of Untrusted Data vulnerability in Progress WS FTP Server
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.  
network
low complexity
progress CWE-502
8.8