Accellion / Kiteworks
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-24782 | Kiteworks Secure Data Forms has a SQL Injection vulnerability | HIGH | 8.8 | Jun 1, 2026 |
| CVE-2026-24761 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 4.3 | Jun 1, 2026 |
| CVE-2026-24756 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 4.3 | Jun 1, 2026 |
| CVE-2026-24755 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 5.4 | Jun 1, 2026 |
| CVE-2026-24754 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | MEDIUM | 5.4 | Jun 1, 2026 |
| CVE-2026-24753 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 6.5 | Jun 1, 2026 |
| CVE-2026-24752 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | HIGH | 8.2 | Jun 1, 2026 |
| CVE-2026-24751 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | HIGH | 8.2 | Jun 1, 2026 |
| CVE-2026-23638 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key | MEDIUM | 6.5 | Jun 1, 2026 |
| CVE-2026-29092 | Kiteworks Email Protection Gateway has an Insufficient Session Expiration | HIGH | 7.5 | Mar 25, 2026 |
| CVE-2026-23636 | Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type | HIGH | 7.2 | Mar 25, 2026 |
| CVE-2026-23635 | Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials | MEDIUM | 6.5 | Mar 25, 2026 |
| CVE-2026-24750 | Kiteworks Secure Data Forms vulnerable to Cross-site Scripting | HIGH | 7.6 | Mar 25, 2026 |
| CVE-2026-23514 | Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management | HIGH | 8.8 | Mar 25, 2026 |
| CVE-2026-28272 | Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability | HIGH | 8.1 | Feb 27, 2026 |
| CVE-2026-28271 | Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) | MEDIUM | 6.5 | Feb 27, 2026 |
| CVE-2026-28270 | Kiteworks Core has an Unrestricted Upload of File with Dangerous Type | HIGH | 7.2 | Feb 27, 2026 |
| CVE-2026-28269 | Kiteworks Core has an OS Command Injection | HIGH | 8.8 | Feb 26, 2026 |
| CVE-2025-53939 | Kiteworks Core is vulnerable to Improper Input Validation | HIGH | 8.8 | Nov 29, 2025 |
| CVE-2021-31586 | Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search. | HIGH | 8.8 | Jun 23, 2021 |
| CVE-2021-31585 | Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access. | MEDIUM | 6.7 | Jun 23, 2021 |
| CVE-2017-9421 | Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using… | MEDIUM | 6.5 | May 24, 2018 |
Showing 1 to 22 of 22 CVEs