Priority MEDIUM 48
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF).
Vulnerabilities
13 records
Priority MEDIUM 47
Improper authentication in a Kiteworks Email Protection Gateway administrative service.
Priority LOW 37
An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deserialized without sufficient validation, potentially allowing ar…
TI-2026-65252 CVE-2026-102116
Kiteworks Email Protection Gateway Path Traversal
Priority LOW 38
-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code…
TI-2026-65255 CVE-2026-102119
Kiteworks Email Protection Gateway Path Traversal
Priority LOW 36
A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory.
Priority MEDIUM 46
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF).
Priority MEDIUM 46
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF).
TI-2026-65267 CVE-2026-102131
Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity
Priority LOW 36
Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form in which they could be supplied.
Priority MEDIUM 47
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF).
Priority LOW 38
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution.
Priority MEDIUM 47
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery.
Priority LOW 37
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load from an imported rule configuration.
TI-2026-65225 CVE-2026-102089
Kiteworks Email Protection Gateway path traversal
Priority LOW 37
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the…