Kiteworks / Secure Data Forms
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-102109 | Kiteworks Secure Data Forms SQL injection | HIGH | 7.1 | Sep 30, 2026 |
| CVE-2026-102121 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor | HIGH | 8.6 | Sep 30, 2026 |
| CVE-2026-102150 | Kiteworks Secure Data Forms Missing Authentication for Critical Function | HIGH | 7.2 | Sep 30, 2026 |
| CVE-2026-102091 | Kiteworks Secure Data Forms server-side request forgery | HIGH | 7.5 | Sep 30, 2026 |
| CVE-2026-24782 | Kiteworks Secure Data Forms has a SQL Injection vulnerability | HIGH | 8.8 | Jun 1, 2026 |
| CVE-2026-24761 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 4.3 | Jun 1, 2026 |
| CVE-2026-24756 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 4.3 | Jun 1, 2026 |
| CVE-2026-24755 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 5.4 | Jun 1, 2026 |
| CVE-2026-24753 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 6.5 | Jun 1, 2026 |
| CVE-2026-24752 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | HIGH | 8.2 | Jun 1, 2026 |
| CVE-2026-24751 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | HIGH | 8.2 | Jun 1, 2026 |
| CVE-2026-23638 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 6.5 | Jun 1, 2026 |
| CVE-2026-23636 | Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type | HIGH | 7.2 | Mar 25, 2026 |
| CVE-2026-23635 | Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials | MEDIUM | 6.5 | Mar 25, 2026 |
| CVE-2026-24750 | Kiteworks Secure Data Forms vulnerable to Cross-site Scripting | HIGH | 7.6 | Mar 25, 2026 |
Showing 1 to 15 of 15 CVEs