---
title: "Accellion FTP Server vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/accellion/ftp-server
type: product
description: "Accellion FTP Server has 2 published CVEs, 0 in CISA KEV and 2 with public exploits."
updated: 2018-07-13
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Accellion FTP Server vulnerabilities

Vendor: [Accellion](https://radicalnotion.ai/vendor/accellion)

- **Published CVEs:** 2
- **In CISA KEV:** 0
- **With a public exploit:** 2
- **With a patch:** 2
- **Average CVSS:** 5.7
- **First CVE:** 2018-07-13
- **Latest CVE:** 2018-07-13

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 0 |
| Medium | 2 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-204](https://radicalnotion.ai/cwe/cwe-204) | Observable Response Discrepancy | 1 |
| [CWE-80](https://radicalnotion.ai/cwe/cwe-80) | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2018 | 2 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \< fta\_9\_12\_220 | range | 2 |
| FTA\_9\_12\_220 \<= v \< FTA\_9\_12\_220 | range | 2 |
| fta\_9\_12\_220 | patched | 2 |
| FTA\_9\_12\_220 | patched | 2 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2016-9500 | The Accellion FTP server prior to version FTA\_9\_12\_220 is vulnerable to informaiton exposure | medium | 6.1 | No | Yes | Yes |
| CVE-2016-9499 | The Accellion FTP server prior to version FTA\_9\_12\_220 is vulnerable to cross-site scripting. | medium | 5.3 | No | Yes | Yes |

## Frequently asked questions

### How many CVEs does Accellion FTP Server have?

Accellion FTP Server has 2 published CVE records since 2018.

### How many Accellion FTP Server CVEs are in CISA KEV?

None of Accellion FTP Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Accellion FTP Server vulnerabilities?

Yes — 2 of Accellion FTP Server's CVEs have a known public exploit.

### Which versions of Accellion FTP Server are affected?

4 distinct Accellion FTP Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Accellion FTP Server CVEs?

Accellion FTP Server's CVEs most often map to these CWE weakness types: CWE-204 (Observable Response Discrepancy), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)).

### What is the average severity of Accellion FTP Server CVEs?

The average CVSS base score across Accellion FTP Server's scored CVEs is 5.7.

## Other products from this vendor

- [kiteworks](https://radicalnotion.ai/vendor/accellion/kiteworks) (83 CVEs)
- [File Transfer Appliance](https://radicalnotion.ai/vendor/accellion/file-transfer-appliance) (20 CVEs)
- [secure file transfer appliance](https://radicalnotion.ai/vendor/accellion/secure-file-transfer-appliance) (7 CVEs)
- [FTA](https://radicalnotion.ai/vendor/accellion/fta) (6 CVEs)
- [kiteworks managed file transfer](https://radicalnotion.ai/vendor/accellion/kiteworks-managed-file-transfer) (4 CVEs)
- [kiteworks appliance](https://radicalnotion.ai/vendor/accellion/kiteworks-appliance) (3 CVEs)
- [Accellion FTA](https://radicalnotion.ai/vendor/accellion/accellion-fta) (2 CVEs)
- [FTA 9\_12\_411 and earlier](https://radicalnotion.ai/vendor/accellion/fta-9-12-411-and-earlier) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/accellion/ftp-server). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.