Vulnerabilidades em kiteworks

86 resultados
Análise Vexday

Kiteworks registra 23 vulnerabilidades conhecidas na base, com 9 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma das vulnerabilidades está sendo explorada ativamente em campo (KEV) e não há críticas CVSS, sugerindo severidade moderada. A fraqueza dominante CWE-639 (autorização inadequada) aponta para problemas de controle de acesso que requerem atenção prioritária.

CVE-2026-102093HIGHKiteworks Core improper privilege managementEPSS 1.0%CVE-2026-102132HIGHKiteworks Core Privilege Escalation through Improper Access ControlEPSS 1.0%CVE-2026-23636MEDIUMKiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeEPSS 1.0%CVE-2026-102115CRITICALKiteworks Core Authentication Bypass in the Password Reset WorkflowEPSS 1.0%CVE-2026-102146MEDIUMKiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template InjectionEPSS 1.0%CVE-2025-53899HIGHKiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelEPSS 1.0%CVE-2026-102098HIGHKiteworks Core SQL InjectionEPSS 1.0%CVE-2026-102123HIGHKiteworks Core Path TraversalEPSS 1.0%CVE-2026-102101HIGHKiteworks Core deserialization of untrusted dataEPSS 0.9%CVE-2026-102129HIGHKiteworks Core Incorrect Privilege AssignmentEPSS 0.8%CVE-2026-102102CRITICALKiteworks Email Protection Gateway server-side request forgeryEPSS 0.8%CVE-2025-53939MEDIUMKiteworks Core is vulnerable to Improper Input ValidationEPSS 0.8%CVE-2026-102103CRITICALKiteworks Email Protection Gateway server-side request forgeryEPSS 0.7%CVE-2026-102104CRITICALKiteworks Email Protection Gateway server-side request forgeryEPSS 0.7%CVE-2026-24782HIGHKiteworks Secure Data Forms has a SQL Injection vulnerabilityEPSS 0.7%CVE-2026-102105CRITICALKiteworks Email Protection Gateway server-side request forgeryEPSS 0.5%CVE-2026-28271MEDIUMKiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.5%CVE-2026-102147CRITICALKiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)EPSS 0.5%CVE-2026-102121HIGHKiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized ActorEPSS 0.5%CVE-2026-102120HIGHKiteworks Core OS Command InjectionEPSS 0.4%