Kiteworks Core Authentication Bypass in the Password Reset Workflow

Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

Kiteworks Core OS Command Injection

Kiteworks Core Sandbox Escape

Kiteworks Core stored XSS

Kiteworks Core stored XSS

Kiteworks Core Stored Cross-site Scripting (XSS)

Kiteworks Core deserialization of untrusted data

Kiteworks Core Local Privilege Escalation

Kiteworks Core Local Privilege Escalation

Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

Kiteworks Core Path Traversal

Kiteworks Core OS Command Injection

Kiteworks Core Remote Code Execution

Kiteworks Core Incorrect Privilege Assignment

Kiteworks Core Privilege Escalation through Improper Access Control

Kiteworks Core Remote Code Execution through Server-Side Template Injection

Kiteworks Core OS command injection

Kiteworks Core arbitrary file write

Kiteworks Core improper privilege management

Kiteworks Core SQL Injection

Kiteworks Core Privilege Escalation through External Control of File Name or Path

Kiteworks Core Arbitrary File Write through Command Injection

Kiteworks Core Server-Side Request Forgery through CRLF Injection

Kiteworks Core Missing Authentication for Critical Function

Kiteworks Core Command Execution through Configuration Injection

Missing authentication on a Kiteworks appliance setup function

Kiteworks Core Unprotected Alternate Channel

Kiteworks Core Improper Validation of Specified Quantity in Input

Kiteworks Core Insufficient Verification of Data Authenticity

Kiteworks Core user impersonation in a file-request feature

Kiteworks Core Incorrect Authorization

Kiteworks Core content injection

Kiteworks Core Unrestricted Upload of File with Dangerous Type

Kiteworks Core Server-Side Request Forgery (SSRF)