Koozali

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Koozali records in CISA KEV

No Koozali vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sme Server 1 record LOW

Records

3 records

TI-2026-76243 CVE-2026-108120 · GHSA-wj5h-2j88-93vj

Path traversal in Koozali SME Server View Logs exposes files

MEDIUM 40

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00368 Published 2026-10-19 No fix listed CWE-31

TI-2026-76244 CVE-2026-108121 · GHSA-2pfr-4hx7-3p8p

Koozali SME Server domain creation flaw enables denial of service

LOW 30

Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache con…

CVSS 4.0MEDIUM 6.9 Network High privileges User interaction EPSS 0.00309 Published 2026-10-19 No fix listed CWE-20

TI-2017-14373 CVE-2017-1000027 · GHSA-2233-5gm5-6q44

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL…

LOW 30

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01158 Published 2017-07-13 No fix listed CWE-601

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0