Advisories · Technology
kiteworks security-advisories.
Every CVE that names kiteworks security-advisories among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- kiteworks security-advisories
- Cross-site scripting (XSS)
- CVSS 8.1 High
Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
- kiteworks security-advisories
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)
- kiteworks security-advisories
- Server-side request forgery (SSRF)
- CWE-350
- CVSS 4.9 Medium
Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
- kiteworks security-advisories
- Unrestricted file upload
- CVSS 5.9 Medium
Kiteworks Core has an OS Command Injection
- kiteworks security-advisories
- Command injection
- CVSS 6.3 Medium
Kiteworks Core is vulnerable to Improper Input Validation
- kiteworks security-advisories
- CWE-20
- CVSS 6.5 Medium
Kiteworks MFT has a Privilege Defined With Unsafe Actions
- kiteworks security-advisories
- Privilege escalation
- CVSS 7.2 High
Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
- kiteworks security-advisories
- CWE-941
- CVSS 6.8 Medium
Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability
- kiteworks security-advisories
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
Kiteworks MFT is vulnerable to Insufficient Session Expiration
- kiteworks security-advisories
- Authentication bypass