Kaltura
8 CVEs across 3 Kaltura products. Browse Kaltura vulnerabilities, severities, and proof-of-concept exploits.
Kaltura products with known CVEs
Kaltura CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2016-15044 | | | 2025-07-23 | A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorserv… |
CVE-2022-4882 | Low | 2.6 | 2023-01-09 | A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file mod… |
CVE-2022-4876 | Low | 3.5 | 2023-01-04 | A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/Defa… |
CVE-2017-14143 | Critical | 9.8 | 2017-09-19 | The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass a… |
CVE-2017-14142 | Medium | 6.1 | 2017-09-19 | Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerI… |
CVE-2017-14141 | High | 7.2 | 2017-09-19 | The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks an… |
CVE-2017-6392 | Medium | 6.1 | 2017-03-02 | An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lyn… |
CVE-2017-6391 | Medium | 6.1 | 2017-03-02 | An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "admin_cons… |