Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2016-5664

Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.
0
0
Attacker Value
Unknown

CVE-2016-5663

Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter.
0
0
Attacker Value
Unknown

CVE-2016-5662

Disclosure Date: August 26, 2016 (last updated November 25, 2024)
Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.
0
0