TI-2025-29788 CVE-2025-47221 · GHSA-29m9-646j-c7p3
An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2.
Priority LOW 30
An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2.
Keyfactor
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Keyfactor records in CISA KEVNo Keyfactor vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Signserver · all components
TI-2025-29787 CVE-2025-47220 · GHSA-8pfw-fjhm-qgcf
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The…
Priority LOW 30
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any…
TI-2025-29789 CVE-2025-47222 · GHSA-5wpq-pww3-r4mv
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2.
Priority LOW 29
A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2.
TI-2025-19701 CVE-2025-26787 · GHSA-93g4-gwqx-xffr
An error in the SignServer container startup logic was found in Keyfactor SignServer…
Priority LOW 21
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.