CVE-2022-36968: Progress Ipswitch Ws FTP Server

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery (CSRF) attacks.

Affected products

• Progress Ipswitch Ws FTP Server: before 8.7.3 (fixed in 8.7.3)

Published 2022-08-02. Last modified 2026-06-17.