Fortra Security Updates – 20 August 2025

The addressed vulnerabilities could allow the attacker to perform a denial of service attack, obtain sensitive information, gain elevated privileges, conduct cross-site scripting attacks, or execute arbitrary commands/codes, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

Fortra FileCatalyst Unrestricted File Upload Vulnerability (CVE-2025-8450):

• CVSS: 8.2
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

Sample of the affected products:

• FortraFileCatalyt version 5.1.6 through 5.2.0.
• Fortra GoAnywhere MFT version 7.8.0 and earlier.
• Fortra’s Core Privileged Access Manager (BoKS) versions 7.2.0 to 7.2.0.17.