CVE-2017-8303: Accellion File Transfer Appliance

Critical severity, CVSS 9.8. EPSS: 24.2% chance of exploitation in the next 30 days.

An issue was discovered on Accellion FTA devices before FTA_9_12_180. seos/1000/find.api allows Remote Code Execution with shell metacharacters in the method parameter.

Affected products

• Accellion File Transfer Appliance: before 9_12_180 (fixed in 9_12_180)

Published 2017-05-05. Last modified 2026-06-17.