Opswat
3 CVEs across 6 Opswat products. Browse Opswat vulnerabilities, severities, and proof-of-concept exploits.
Opswat products with known CVEs
Opswat CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-57695 | High | 7.7 | 2025-11-11 | An issue in Agnitum Outpost Security Suite 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842) allows a local attacker to execute arbitrary code via the lock functio… |
CVE-2025-0131 | | | 2025-05-14 | An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows d… |
CVE-2024-52925 | Medium | 6.8 | 2025-02-26 | In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution can be performed by an attacker via the MD Kiosk Unlock Device feature for software encrypt… |
CVE-2023-36659 | Critical | 9.8 | 2023-09-15 | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of se… |
CVE-2023-36657 | Critical | 9.8 | 2023-09-15 | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalat… |
CVE-2023-36658 | High | 7.8 | 2023-09-15 | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally. |
CVE-2022-40778 | Medium | 5.4 | 2022-09-19 | A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML bec… |
CVE-2022-32272 | Critical | 9.8 | 2022-06-09 | OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, res… |
CVE-2022-32273 | Medium | 4.3 | 2022-06-08 | As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate fi… |
CVE-2018-16275 | High | 7.8 | 2018-08-31 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. |