Kiteworks Secure Data Forms vulnerabilities
15 published CVEs name Kiteworks Secure Data Forms among the affected products.
- Published CVEs
- 15
- Last 12 months
- 15
- Critical
- 0
- Known exploited
- 0
Critical 0High 8Medium 6Low 1Not scored 0
Newest CVEs
- CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
Kiteworks · Secure Data Forms
High7.1 - CVE-2026-102121
Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
Kiteworks · Secure Data Forms
High8.6 - CVE-2026-102150
Kiteworks Secure Data Forms Missing Authentication for Critical Function
Kiteworks · Secure Data Forms
High7.2 - CVE-2026-102091
Kiteworks Secure Data Forms server-side request forgery
Kiteworks · Secure Data Forms
High7.5 - CVE-2026-24782
Kiteworks Secure Data Forms has a SQL Injection vulnerability
kiteworks · Secure Data Forms
High7.6 - CVE-2026-24761
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
kiteworks · Secure Data Forms
Low3.7 - CVE-2026-24756
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
kiteworks · Secure Data Forms
Medium4.3 - CVE-2026-24755
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
kiteworks · Secure Data Forms
Medium5.4 - CVE-2026-24753
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
kiteworks · Secure Data Forms
Medium6.5 - CVE-2026-24752
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
kiteworks · Secure Data Forms
High8.2
Most common weaknesses
- CWE-639 Authorization bypass through a user-controlled key (IDOR)5
- CWE-79 Cross-site scripting (XSS)3
- CWE-306 Missing authentication for a critical function2
- CWE-89 SQL injection2
- CWE-200 Exposure of sensitive information1
- CWE-434 Unrestricted file upload1
- CWE-523 1
- CWE-918 Server-side request forgery (SSRF)1