Ipswitch Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Mail Server Software	60
Not Defined	28
File Transfer Software	26
Network Management Software	24
Groupware Software	8

Product

Ipswitch IMail	44
Ipswitch WS_FTP Server	18
Ipswitch Whatsup Gold	12
Ipswitch Ipswitch Collaboration Suite	8
Ipswitch WS FTP Server	6

Remediation

Official Fix	98
Temporary Fix	0
Workaround	6
Unavailable	6
Not Defined	36

Exploitability

High	16
Functional	0
Proof-of-Concept	80
Unproven	4
Not Defined	46

Access Vector

Not Defined	0
Physical	0
Local	8
Adjacent	4
Network	134

Authentication

Not Defined	0
High	2
Low	38
None	106

User Interaction

Not Defined	0
Required	16
None	130

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	6
≤5	16
≤6	40
≤7	22
≤8	38
≤9	6
≤10	18

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	10
≤5	26
≤6	38
≤7	42
≤8	6
≤9	16
≤10	8

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	16
≤6	42
≤7	22
≤8	42
≤9	0
≤10	18

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	2
≤7	8
≤8	2
≤9	2
≤10	6

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	0
≤9	2
≤10	2

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	14
<2k	46
<5k	76
<10k	0
<25k	8
<50k	2
<100k	0
≥100k	0

Exploit Today

<1k	146
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (28): Collaboration Suite (1), IMAIL (1), IMail (41), IMail Express (1), IMail Server (6), Imail (1), Instant Messaging (3), Ipswitch Collaboration Suite (10), MOVEit DMZ (4), MOVEit File Transfer (1), MOVEit Mobile (2), MOVEit Transfer (1), MoveIT (1), MoveIt (1), Server (1), WS FTP Server (10), WS_FTP (9), WS_FTP Home client (1), WS_FTP Pro (5), WS_FTP Server (19), WhatsUp (2), WhatsUp Gold (3), WhatsUp Professional (10), WhatsUp Small Business (1), Whatsup Gold (11), WinCOM LPD (1), Ws Ftp Home (1), switch (1)

Link to Vendor Website: https://www.ipswitch.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
05/11/2023	3.5	3.5	Ipswitch MoveIT API cross site scripting	Unknown	Not Defined	Not Defined	0.00135	0.00	CVE-2023-30394
06/11/2019	8.2	7.8	Ipswitch WS_FTP Server SSHServerAPI.dll path traversal	File Transfer Software	Not Defined	Official Fix	0.00094	0.00	CVE-2019-12146
06/11/2019	7.4	7.1	Ipswitch WS_FTP Server SSHServerAPI.dll path traversal	File Transfer Software	Not Defined	Official Fix	0.00094	0.00	CVE-2019-12145
06/11/2019	8.5	8.2	Ipswitch WS_FTP Server SSHServerAPI.dll path traversal	File Transfer Software	Not Defined	Official Fix	0.00538	0.03	CVE-2019-12144
06/11/2019	6.3	6.1	Ipswitch WS_FTP Server SSHServerAPI.dll path traversal	File Transfer Software	Not Defined	Official Fix	0.00096	0.00	CVE-2019-12143
05/01/2018	9.0	8.9	Ipswitch Whatsup Gold NmAPI.exe server-side request forgery	Network Management Software	Not Defined	Official Fix	0.00222	0.05	CVE-2018-8939
05/01/2018	9.0	8.9	Ipswitch Whatsup Gold SNMP MIB File DlgSelectMibFile.asp code injection	Network Management Software	Not Defined	Official Fix	0.00159	0.00	CVE-2018-8938
02/02/2018	5.2	5.2	Ipswitch MoveIt human.aspx Stored cross site scripting	Unknown	Not Defined	Not Defined	0.00115	0.00	CVE-2018-6545
01/24/2018	9.0	8.9	Ipswitch Whatsup Gold Legacy ASP Page sql injection	Network Management Software	Not Defined	Official Fix	0.00190	0.00	CVE-2018-5778
01/24/2018	9.0	8.9	Ipswitch Whatsup Gold TFTP Server access control	Network Management Software	Not Defined	Official Fix	0.00394	0.00	CVE-2018-5777
11/03/2017	6.8	6.1	Ipswitch WS_FTP Pro Search memory corruption	Unknown	Proof-of-Concept	Official Fix	0.00310	0.00	CVE-2017-16513
10/03/2017	8.5	8.5	Ipswitch IMail Server IMmailSrv memory corruption	Mail Server Software	Not Defined	Not Defined	0.01303	0.00	CVE-2017-12639
10/03/2017	8.5	8.5	Ipswitch IMail Server IMmailSrv memory corruption	Mail Server Software	Not Defined	Not Defined	0.01303	0.00	CVE-2017-12638
05/18/2017	8.5	8.5	Ipswitch MOVEit DMZ/MOVEit Transfer sql injection	Unknown	Not Defined	Not Defined	0.00134	0.00	CVE-2017-6195
10/06/2016	8.0	7.9	Ipswitch Whatsup Gold WrFreeFormText.asp Blind sql injection	Network Management Software	Not Defined	Official Fix	0.00083	0.00	CVE-2016-1000000
10/06/2016	6.3	6.3	Ipswitch Whatsup Gold WrFreeFormText.asp Blind sql injection	Network Management Software	Not Defined	Not Defined	0.00000	0.00	CVE-2016-10000
04/15/2016	5.4	5.4	Ipswitch MOVEit File Transfer File View on Download cross site scripting	File Transfer Software	Not Defined	Not Defined	0.00069	0.00	CVE-2015-7676
02/10/2016	5.3	5.2	Ipswitch MOVEit DMZ SOAP Request machine.aspx User information disclosure	Unknown	Not Defined	Official Fix	0.00335	0.00	CVE-2015-7680
02/10/2016	6.1	5.9	Ipswitch MOVEit Mobile cross site scripting	Unknown	Not Defined	Official Fix	0.00142	0.00	CVE-2015-7679
02/10/2016	8.8	8.8	Ipswitch MOVEit Mobile cross-site request forgery	Unknown	Not Defined	Not Defined	0.00126	0.06	CVE-2015-7678
02/10/2016	4.3	4.2	Ipswitch MOVEit DMZ MOVEitSAPI Service MOVEitISAPI.dll information disclosure	Unknown	Not Defined	Official Fix	0.00095	0.00	CVE-2015-7677
02/10/2016	6.5	6.3	Ipswitch MOVEit DMZ Send Attachment Feature information disclosure	Unknown	Not Defined	Official Fix	0.00121	0.04	CVE-2015-7675
01/08/2016	9.8	9.5	Ipswitch Whatsup Gold SOAP Request DroneDeleteOldMeasurements sql injection	Network Management Software	Proof-of-Concept	Official Fix	0.00138	0.00	CVE-2015-8261
12/27/2015	6.9	6.8	Ipswitch Whatsup Gold cross site scripting	Network Management Software	Proof-of-Concept	Official Fix	0.00452	0.00	CVE-2015-6005
12/27/2015	6.5	6.4	Ipswitch Whatsup Gold WrFreeFormText.asp sql injection	Network Management Software	Proof-of-Concept	Official Fix	0.00532	0.06	CVE-2015-6004

121 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 121 results.

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!