Kiteworks vulnerabilities
86 published CVEs name Kiteworks among the affected products.
- Published CVEs
- 86
- Last 12 months
- 85
- Critical
- 9
- Known exploited
- 0
Critical 9High 42Medium 32Low 2Not scored 1
CVEs per yearBy the year they were published
- 20241
- 20255
- 202680
Newest CVEs
- CVE-2026-84473
CVE-2026-84473
Kiteworks · ownCloud
Not scored - CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forgery
Kiteworks · Email Protection Gateway
Critical9.1 - CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication
Kiteworks · Email Protection Gateway
Critical9.1 - CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature
Kiteworks · Core
Medium4.6 - CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrusted data
Kiteworks · Email Protection Gateway
High7.2 - CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
Kiteworks · Secure Data Forms
High7.1 - CVE-2026-102110
Missing authentication on a Kiteworks appliance setup function
Kiteworks · Core
Medium5.9 - CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in Input
Kiteworks · Core
Medium4.9 - CVE-2026-102112
Kiteworks Core Local Privilege Escalation
Kiteworks · Core
High7.8 - CVE-2026-102113
Kiteworks Core Local Privilege Escalation
Kiteworks · Core
High7.8
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)9
- CWE-918 Server-side request forgery (SSRF)8
- CWE-306 Missing authentication for a critical function7
- CWE-639 Authorization bypass through a user-controlled key (IDOR)7
- CWE-22 Path traversal6
- CWE-269 Improper privilege management5
- CWE-434 Unrestricted file upload5
- CWE-78 OS command injection5
- CWE-502 Deserialization of untrusted data3
- CWE-89 SQL injection3