Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
accellion kiteworks vulnerabilities and exploits
(subscribe to this query)
6.4
CVSSv2
CVE-2017-9421
Authentication Bypass vulnerability in Accellion kiteworks prior to 2017.01.00 allows remote malicious users to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.
Accellion Kiteworks
4.6
CVSSv2
CVE-2021-31585
Accellion Kiteworks prior to 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.
Accellion Kiteworks
6.5
CVSSv2
CVE-2021-31586
Accellion Kiteworks prior to 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.
Accellion Kiteworks
4.3
CVSSv2
CVE-2016-5663
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote malicious users to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter.
Accellion Kiteworks Appliance
5
CVSSv2
CVE-2016-5664
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote malicious users to read files via a crafted URI.
Accellion Kiteworks Appliance
7.2
CVSSv2
CVE-2016-5662
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
Accellion Kiteworks Appliance
4
CVSSv2
CVE-2022-24110
Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.
Accellion Managed File Transfer
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injection
CVE-2006-4304
CVE-2023-26603
CVE-2024-28327
CVE-2023-50363
CVE-2024-21905
template injection
CVE-2024-3400
cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started