Vulnerabilities

TI-2016-04920 CVE-2016-5664 · GHSA-mq4g-wgcm-5x8j

Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00…

LOW 25

Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02389 Published 2016-08-26 No fix listed CWE-22

TI-2016-04919 CVE-2016-5663 · GHSA-q4pr-4mw4-cg66

Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, o…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00896 Published 2016-08-26 No fix listed CWE-79

TI-2016-04918 CVE-2016-5662 · GHSA-7rc9-2xx4-9crj

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for…

LOW 34

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified vectors.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00383 Published 2016-08-26 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00…

Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion…

Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for…