Secure Data Forms
Approved changes feed: RSS · Atom
cpe:2.3:a:kiteworks:secure_data_forms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kiteworks (d7914f90-f1d3-5b1c-b860-b41dc97d8156) |
|---|---|
| Product | Secure Data Forms (8bc26b09-0dd8-57d8-8b9b-3074e52f4bcd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24782 |
vulnerable | 2026-06-08 07:51:18.166036 |
Kiteworks Secure Data Forms has a SQL Injection vulnerability
HIGH (7.6)
Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global configuration parameters. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
Published: 2026-06-01T22:00:24.657Z
Updated: 2026-06-02T12:30:33.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24761 |
vulnerable | 2026-06-08 07:51:18.125313 |
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
LOW (3.7)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
Published: 2026-06-01T21:52:53.195Z
Updated: 2026-06-02T13:02:25.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24756 |
vulnerable | 2026-06-08 07:51:18.125169 |
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
MEDIUM (4.3)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
Published: 2026-06-01T21:51:04.450Z
Updated: 2026-06-02T12:30:24.647Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24755 |
vulnerable | 2026-06-08 07:51:18.125005 |
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
MEDIUM (5.4)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
Published: 2026-06-01T21:49:22.787Z
Updated: 2026-06-02T15:51:03.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24753 |
vulnerable | 2026-06-08 07:51:18.123161 |
Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
MEDIUM (6.5)
Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.
Published: 2026-06-01T21:45:59.292Z
Updated: 2026-06-02T12:29:53.036Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24752 |
vulnerable | 2026-06-08 07:51:18.122809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24750 |
vulnerable | 2026-06-08 07:51:18.114817 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23636 |
vulnerable | 2026-06-08 07:51:15.696773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23635 |
vulnerable | 2026-06-08 07:51:15.695442 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.