WS_FTP Server (< 2025.0.5)

An unauthenticated remote attacker can trigger a denial of service condition in Progress Software WS_FTP Server versions prior to 2025.0.5 by exploiting insufficient resource limits.

An improper access restriction vulnerability in the Thin Client Web Transfer component of Progress Software WS_FTP Server allows authenticated users to perform unauthorized path traversal to access files outside their intended scope.

Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations.

Progress WS_FTP Server versions prior to 2025.0.5 are vulnerable to man-in-the-middle attacks, allowing network attackers to intercept or modify traffic when unencrypted connections are permitted.