Advisories · Technology
Kiteworks Secure Data Forms.
Every CVE that names Kiteworks Secure Data Forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Kiteworks Secure Data Forms SQL injection
- Kiteworks Secure Data Forms
- SQL injection
- CVSS 8.6 High
Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
- Kiteworks Secure Data Forms
- Information disclosure
- Authentication bypass
- CVSS 7.2 High
Kiteworks Secure Data Forms Missing Authentication for Critical Function
- Kiteworks Secure Data Forms
- Authentication bypass
- CVSS 7.5 High
Kiteworks Secure Data Forms server-side request forgery
- Kiteworks Secure Data Forms
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Kiteworks Secure Data Forms has a SQL Injection vulnerability
- kiteworks Secure Data Forms
- SQL injection
- CVSS 3.7 Low
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- kiteworks Secure Data Forms
- Broken access control
- CVSS 4.3 Medium
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- kiteworks Secure Data Forms
- Broken access control
- CVSS 5.4 Medium
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- kiteworks Secure Data Forms
- Broken access control
- CVSS 6.5 Medium
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- kiteworks Secure Data Forms
- Broken access control
- CVSS 8.2 High
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- kiteworks Secure Data Forms
- Cross-site scripting (XSS)
- CVSS 8.2 High
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- kiteworks Secure Data Forms
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- kiteworks Secure Data Forms
- Broken access control
- CVSS 5.5 Medium
Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type
- kiteworks Secure Data Forms
- Unrestricted file upload
- CVSS 6.5 Medium
Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
- kiteworks Secure Data Forms
- CWE-523
- CVSS 7.6 High
Kiteworks Secure Data Forms vulnerable to Cross-site Scripting
- kiteworks Secure Data Forms
- Cross-site scripting (XSS)