Accellion Kiteworks Appliance
3 CVEs affecting Accellion Kiteworks Appliance. Latest disclosed: 2016-08-26. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-5662 | High | 7.8 | 2016-08-26 | Accellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli, which allows local users to gain privileges via unspecified ve… |
CVE-2016-5663 | Medium | 6.1 | 2016-08-26 | Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to injec… |
CVE-2016-5664 | Medium | 4.3 | 2016-08-26 | Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI. |