CVE-2012-2999

no score yetEPSS 1.2%

cerberusftp ftp server: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP service, as demonstrated by a request to usermanager/users/modify.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-10-04
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cerberusftp:ftp_server

References

http://www.cerberusftp.com/products/releasenotes.html
http://www.kb.cert.org/vuls/id/989684
http://www.securityfocus.com/bid/55788
http://www.cerberusftp.com/products/releasenotes.html
http://www.kb.cert.org/vuls/id/989684

Check your stack JSON