Accellion kiteworks

Kiteworks Email Protection Gateway unsafe reflection

Kiteworks Email Protection Gateway deserialization of untrusted data

Kiteworks Email Protection Gateway Path Traversal

Kiteworks Core Remote Code Execution

Kiteworks Core Remote Code Execution through Server-Side Template Injection

Kiteworks Email Protection Gateway Remote Code Execution

Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity

Kiteworks Core improper privilege management

Kiteworks Core Privilege Escalation through Improper Access Control

Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type

Kiteworks Core SQL Injection

Kiteworks Core Incorrect Privilege Assignment

Kiteworks Secure Data Forms Missing Authentication for Critical Function

Kiteworks Secure Data Forms SQL injection

Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.

Kiteworks Core Privilege Escalation through External Control of File Name or Path

Kiteworks Email Protection Gateway Deserialization of Untrusted Data

Kiteworks Core Arbitrary File Write through Command Injection

Kiteworks Core Server-Side Request Forgery through CRLF Injection

Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.

Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection

Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway Incorrect Authorization

Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

Kiteworks Core Missing Authentication for Critical Function

Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks Core Command Execution through Configuration Injection

Missing authentication on a Kiteworks appliance setup function

Kiteworks Core Unprotected Alternate Channel

Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting

Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

Kiteworks Core Improper Validation of Specified Quantity in Input

Kiteworks Core Insufficient Verification of Data Authenticity

Kiteworks Core user impersonation in a file-request feature

Kiteworks Core content injection

Kiteworks Core Incorrect Authorization

Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key