Skip to main content
EVULNABLE
Home

Accellion

CVEs currently on EVULNABLE's Priority Feed for Accellion, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 4 Accellion CVEs in EVULNABLE's ranked feed.

#1 85 Immediate CVE-2021-27104 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Accellion — Accellion FTA OS Command Injection Vulnerability KEV + ransomware, EPSS 56.7%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS56.7% · 99.06th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

#2 85 Immediate CVE-2021-27103 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Accellion — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability KEV + ransomware, EPSS 11.4%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS11.4% · 96th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

#3 85 Immediate CVE-2021-27101 ExigentKEV since 2021 · listed over a yearRansomwareCISA KEV Accellion — Accellion FTA SQL Injection Vulnerability KEV + ransomware, EPSS 6.0%

EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.8 (NVD)EPSS6.0% · 93.2nd pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.

#4 75 Urgent CVE-2021-27102 KEV since 2021 · listed over a yearRansomwareCISA KEV Accellion — Accellion FTA OS Command Injection Vulnerability KEV + ransomware, EPSS 3.7%

EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS7.8 (NVD)EPSS3.7% · 89.5th pctlKEV since2021-11-03

Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.