Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2021-31586
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.
0
Attacker Value
Unknown
CVE-2021-31585
Disclosure Date: June 23, 2021 (last updated November 28, 2024)
Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access.
0
Attacker Value
Unknown
CVE-2017-9421
Disclosure Date: May 24, 2018 (last updated November 26, 2024)
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token.
0
Attacker Value
Unknown
CVE-2016-5664
Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.
0
Attacker Value
Unknown
CVE-2016-5663
Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter.
0
Attacker Value
Unknown
CVE-2016-5662
Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
0
