AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-40045

HIGH · CVSS 8.3 EPSS 0.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-27 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.3. It affects Java.

CVE
CVE-2023-40045
Severity
HIGH
CVSS
8.3
EPSS
0.90%
Java

Original NVD Description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a reflected cross-site scripting (XSS) vulnerability exists in WS_FTP Server's Ad Hoc Transfer module.  An attacker could leverage this vulnerability to target WS_FTP Server users with a specialized payload which results in the execution of malicious JavaScript within the context of the victims browser.

Related CVEs

Other vulnerabilities affecting the same vendor(s)