TI-2023-10691 CVE-2023-25267 · GHSA-hj76-6x6q-33x8
An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0).
Priority HIGH 73
An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0).
GFI Software
Records64All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
GFI Software records in CISA KEVNo GFI Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Kerio Connect · all components
TI-2025-02592 CVE-2025-2977 · GHSA-mhvg-p8wf-ccj2
GFI KerioConnect PDF File cross site scripting
Priority MEDIUM 56
A vulnerability was found in GFI KerioConnect 10.0.6.
TI-2025-02591 CVE-2025-2976 · GHSA-x3jr-fmvq-5xwh
GFI KerioConnect File Upload cross site scripting
Priority MEDIUM 56
A vulnerability was found in GFI KerioConnect 10.0.6.
TI-2025-02590 CVE-2025-2975 · GHSA-gc8p-c387-qwq8
GFI KerioConnect Signature EditHtmlSource cross site scripting
Priority MEDIUM 56
A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic.
TI-2017-05092 CVE-2017-7440 · GHSA-9354-6mjp-r2vv
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for…
Priority LOW 31
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a craft…