Kiuwan

5 CVEs across 2 Kiuwan products. Browse Kiuwan vulnerabilities, severities, and proof-of-concept exploits.

Kiuwan products with known CVEs

ProductCVEs
Sast4
Sast Local Analyzer1
Kiuwan CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24069Medium5.42026-04-14Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan C…
CVE-2023-49113High7.82024-06-20The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compr…
CVE-2023-49112Medium6.52024-06-20Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" param…
CVE-2023-49111Medium6.52024-06-20For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "logi…
CVE-2023-49110High7.22024-06-20When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud/SaaS solution), the transmitted data …