← Back to browse · API

CVE-2021-27101

Severity
CRITICAL
CVSS
9.8
EPSS
0.05949
Risk score
66.28
CISA KEV
Yes
PoC
No
Published
2021-02-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2021-13871, GHSA-GC74-7WPX-43CH
Products
Accellion:FTA, n/a:n/a n/a
Sources
cisa.gov CVE-2021-27101
euvd EUVD-2021-13871

Description

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.

References