Vulnerabilidades em kiteworks

86 resultados
Análise Vexday

Kiteworks registra 23 vulnerabilidades conhecidas na base, com 9 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma das vulnerabilidades está sendo explorada ativamente em campo (KEV) e não há críticas CVSS, sugerindo severidade moderada. A fraqueza dominante CWE-639 (autorização inadequada) aponta para problemas de controle de acesso que requerem atenção prioritária.

CVE-2026-102150HIGHKiteworks Secure Data Forms Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-29092MEDIUMKiteworks Email Protection Gateway has an Insufficient Session ExpirationEPSS 0.2%CVE-2026-24750HIGHKiteworks Secure Data Forms vulnerable to Cross-site ScriptingEPSS 0.2%CVE-2026-102149CRITICALKiteworks Email Protection Gateway Improper Access ControlEPSS 0.2%CVE-2026-102110MEDIUMMissing authentication on a Kiteworks appliance setup functionEPSS 0.2%CVE-2025-53897MEDIUMKiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-7273MEDIUMCross Site Request Forgery in Kiteworks OwnCloudEPSS 0.2%CVE-2026-102111MEDIUMKiteworks Core Improper Validation of Specified Quantity in InputEPSS 0.2%CVE-2026-102128HIGHKiteworks Email Protection Gateway Improper AuthenticationEPSS 0.2%CVE-2026-102134MEDIUMKiteworks Core Unprotected Alternate ChannelEPSS 0.2%CVE-2025-53896HIGHKiteworks MFT is vulnerable to Insufficient Session ExpirationEPSS 0.2%CVE-2026-102124MEDIUMKiteworks Core Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-102090MEDIUMKiteworks Core content injectionEPSS 0.2%CVE-2026-102127HIGHKiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceEPSS 0.2%CVE-2026-23638MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2026-102138LOWKiteworks Core Server-Side Request Forgery (SSRF)EPSS 0.2%CVE-2026-24753MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2026-102107MEDIUMKiteworks Core user impersonation in a file-request featureEPSS 0.2%CVE-2026-102122MEDIUMKiteworks Core Incorrect AuthorizationEPSS 0.2%CVE-2026-24756MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%