Skip to contentKiteworks vulnerabilities
Newest
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway has an Insufficient Session ExpirationCVE-2026-290924.9 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeCVE-2026-236365.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a potential Unprotected Transport of CredentialsCVE-2026-236356.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms vulnerable to Cross-site ScriptingCVE-2026-247507.6 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core before 9.2.2 is vulnerable to Improper Ownership ManagementCVE-2026-235148.8 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityCVE-2026-282728.1 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)CVE-2026-282716.5 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an Unrestricted Upload of File with Dangerous TypeCVE-2026-282704.9 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an OS Command InjectionCVE-2026-282695.9 Medium
- kiteworks owncloudOwnCloud 8.1.8 - Username DisclosureCVE-2019-253375.3 Medium
- kiteworks security-advisories, nextcloud two-factor webauthn +1 moreNextcloud Twofactor WebAuthn app was updated based on public keyCVE-2025-665583.1 Low
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud talk allows participants to blindly delete poll drafts of other users by IDCVE-2025-665563.5 Low
- nextcloud contacts, kiteworks security-advisories +1 moreNextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title fieldCVE-2025-665543.5 Low
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directoryCVE-2025-66549Fix available2.4 Low
- kiteworks security-advisories, nextcloud group folders +1 moreNextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash binCVE-2025-665453.5 Low
- nextcloud approval, kiteworks security-advisories +1 moreNextcloud Approval app allows users to request approval for other users fileCVE-2025-665152.7 Low
- nextcloud mail, kiteworks security-advisories +1 moreNextcloud Mail stored HTML injection in subject textCVE-2025-665143.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-ownersCVE-2025-665575.4 Medium
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck app allows to spoof file extensions by using RTLO charactersCVE-2025-665483.3 Low
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud Tables app allowed users to view columns metadata information of any tableCVE-2025-665534.3 Medium
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud Tables is missing an ownership check which allows moving columns into tables of other usersCVE-2025-665516.3 Medium
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud Tables app share information not limited to relevant usersCVE-2025-665134.3 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreNextcloud Calendar attachments of local files are offered to downloadedCVE-2025-665505.7 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreNextcloud Calendar app allowed booking appointments without the generated tokenCVE-2025-665463.3 Low
- nextcloud calendar, kiteworks security-advisories +1 moreNextcloud Calendar app used predictable proposal participant tokensCVE-2025-665114.8 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server admin_audit does not log all actions on files in groupfoldersCVE-2025-66552Fix available4.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server users can modify tags on files that do not belong to themCVE-2025-66547Fix available4.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to XSS in SVG images when opened outside of NextcloudCVE-2025-665125.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact listCVE-2025-66510Fix available4.5 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Improper Input ValidationCVE-2025-539396.3 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Privilege Defined With Unsafe ActionsCVE-2025-539006.5 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelCVE-2025-538997.2 High
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-538976.8 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to Insufficient Session ExpirationCVE-2025-538967.1 High
- kiteworks security-advisoriesNextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a tableCVE-2025-580516.5 Medium
- dracoon security-advisoriesDRACOON Branding Service vulnerable to Cross-site ScriptingCVE-2025-538394.0 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to insecure temporary file creation, race with write access and permissionCVE-2025-477942.6 Low
- nextcloud server, kiteworks security-advisories, nextcloud group folders +2 moreNextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text fileCVE-2025-477934.3 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop 3rdparty applications can create share links via socket APICVE-2025-47792Fix available5.0 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's test remote endpoint is not rate limitedCVE-2025-477914.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server doesn't request second factor after session timeoutCVE-2025-477906.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreNextcloud Mail app does not respect download permissions in sharesCVE-2024-525093.5 Low
- nextcloud mail, kiteworks security-advisories +1 moreNextcloud Mail auto configurator can be tricked into sending account information to wrong serversCVE-2024-525088.2 High
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is emptyCVE-2024-52510Public exploitFix available4.2 Medium
- nextcloud tables, kiteworks security-advisories +1 moreShare information of the Nextcloud Tables app is not limited to affected usersCVE-2024-525073.5 Low
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud Tables has an Authorization Bypass Through User-Controlled Key in TablesCVE-2024-525116.3 Medium
- nextcloud user oidc, kiteworks security-advisories +1 moreNextcloud User OIDC has an open redirection when logging in with User OIDCCVE-2024-525123.3 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" sharesCVE-2024-525132.6 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server allows users to copy folder that contain files that are blocked by the files access controlCVE-2024-525144.1 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has incomplete sanitization of SVG files allows to embed other images into previewsCVE-2024-525155.7 Medium
- Show moreLoading…