Microsoft File Transfer Manager vulnerabilities

2 CVEs affecting Microsoft File Transfer Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-0978, published 2002-09-24.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-0977, published 2002-09-24. High severity, CVSS 7.5. EPSS: 10.9% chance of exploitation in the next 30 days. Buffer overflow in Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to execute arbitrary code via a long TS value.
• CVE-2002-0978, published 2002-09-24. Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days. Microsoft File Transfer Manager (FTM) ActiveX control before 4.0 allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack with modified TGT…