Advisories · Technology
Kiteworks Email Protection Gateway.
Every CVE that names Kiteworks Email Protection Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway server-side request forgery
- Kiteworks Email Protection Gateway
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway improper authentication
- Kiteworks Email Protection Gateway
- Authentication bypass
- CVSS 7.2 High
Kiteworks Email Protection Gateway deserialization of untrusted data
- Kiteworks Email Protection Gateway
- Insecure deserialization
- CVSS 7.2 High
Kiteworks Email Protection Gateway Path Traversal
- Kiteworks Email Protection Gateway
- Path traversal
- Other injection
- CVSS 7.2 High
Kiteworks Email Protection Gateway Path Traversal
- Kiteworks Email Protection Gateway
- Path traversal
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway server-side request forgery
- Kiteworks Email Protection Gateway
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway server-side request forgery
- Kiteworks Email Protection Gateway
- Server-side request forgery (SSRF)
- CVSS 7.0 High
Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference
- Kiteworks Email Protection Gateway
- XML external entities (XXE)
- CVSS 7.5 High
Kiteworks Email Protection Gateway Improper Authentication
- Kiteworks Email Protection Gateway
- Authentication bypass
- CVSS 7.2 High
Kiteworks Email Protection Gateway Remote Code Execution
- Kiteworks Email Protection Gateway
- Code injection
- Unrestricted file upload
- CVSS 7.2 High
Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity
- Kiteworks Email Protection Gateway
- Code injection
- CWE-178
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway server-side request forgery
- Kiteworks Email Protection Gateway
- Server-side request forgery (SSRF)
- CVSS 6.6 Medium
Kiteworks Email Protection Gateway Deserialization of Untrusted Data
- Kiteworks Email Protection Gateway
- Insecure deserialization
- CVSS 6.5 Medium
Kiteworks Email Protection Gateway Incorrect Authorization
- Kiteworks Email Protection Gateway
- Broken access control
- CVSS 7.5 High
Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
- Kiteworks Email Protection Gateway
- Authentication bypass
- Unrestricted file upload
- CVSS 5.3 Medium
Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
- Kiteworks Email Protection Gateway
- Authentication bypass
- Denial of service
- CVSS 9.4 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway Improper Access Control
- Kiteworks Email Protection Gateway
- Authentication bypass
- CVSS 6.5 Medium
Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
- Kiteworks Email Protection Gateway
- Path traversal
- CVSS 7.2 High
Kiteworks Email Protection Gateway remote code execution
- Kiteworks Email Protection Gateway
- Path traversal
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Kiteworks Email Protection Gateway server-side request forgery
- Kiteworks Email Protection Gateway
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Kiteworks Email Protection Gateway unsafe reflection
- Kiteworks Email Protection Gateway
- Code injection
- CVSS 7.2 High
Kiteworks Email Protection Gateway path traversal
- Kiteworks Email Protection Gateway
- Path traversal
- CVSS 4.9 Medium
Kiteworks Email Protection Gateway has an Insufficient Session Expiration
- Kiteworks Email Protection Gateway
- Authentication bypass