CVE-2016-9500: Accellion FTP Server

Medium severity, CVSS 6.1. EPSS: 5.4% chance of exploitation in the next 30 days.

Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.

Affected products

• Accellion FTP Server: before fta_9_12_220 (fixed in fta_9_12_220)

Published 2018-07-13. Last modified 2026-06-17.