Gfi Kerio Control
5 CVEs affecting Gfi Kerio Control. Latest disclosed: 2025-07-02. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34071 | Critical | 9.8 | 2025-07-02 | A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the f… |
CVE-2025-34070 | Critical | 9.8 | 2025-07-02 | A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged opera… |
CVE-2025-34069 | Critical | 9.8 | 2025-07-02 | An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent se… |
CVE-2024-52875 | High | 8.8 | 2025-01-31 | An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertException.cs and /nonauth/guestConfirm.c… |
CVE-2019-16414 | Medium | 6.1 | 2019-09-30 | A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to… |