CVE-2022-36968

MEDIUM 4.3CVE-2022-36968 · Published 02/08/2022 · updated 17/06/2026

In short

CVE-2022-36968 is a MEDIUM (CVSS 4.3) vulnerability affecting ipswitch ws ftp server (progress).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.3% of all vulnerabilities.
Fix: update to 8.7.3 or later.

Package	Affected versions	Patched versions
ipswitch ws ftp server progress	`< 8.7.3`	`8.7.3`

Description

In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.

References

community.progress.com/s/article/WS-FTP-Server-Critical-Security-Product-Alert-Bulletin-June-2022 · Vendor Advisory
progress.com/ws_ftp · Product

More vulnerabilities in ipswitch ws ftp server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free