Kiteworks Security Vulnerabilities and Issues — Kiteworks CVE List

Lucene search

AccellionKiteworks

3 matches found

CVE•added 2021/06/23 12:15 p.m.•43 views

CVE-2021-31585

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.

6.7CVSS6.5AI score0.0018EPSS

CVE•added 2021/06/23 12:15 p.m.•42 views

CVE-2021-31586

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

8.8CVSS8.9AI score0.00367EPSS

CVE•added 2018/05/24 1:29 p.m.•31 views

CVE-2017-9421

Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.

6.5CVSS6.6AI score0.00256EPSS