Secure Data Forms (Kiteworks) - vulnerabilities (CVEs)
15 CVEs, 4 in the last 30 days, 2 known versions, newest CVE from 2026-09-30. Vendor: Kiteworks.
CVEs of Secure Data Forms
- CVE-2026-102109 - CVSS 7.1 (high), 2026-09-30: A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated…
- CVE-2026-102121 - CVSS 8.6 (high), 2026-09-30: A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors,…
- CVE-2026-102150 - CVSS 7.2 (high), 2026-09-30: A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a…
- CVE-2026-102091 - CVSS 7.5 (high), 2026-09-30: Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the…
- CVE-2026-24782 - CVSS 8.8 (high), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by…
- CVE-2026-24752 - CVSS 8.2 (high), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external…
- CVE-2026-24756 - CVSS 4.3 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms…
- CVE-2026-24755 - CVSS 5.4 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms…
- CVE-2026-24753 - CVSS 6.5 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms…
- CVE-2026-24761 - CVSS 4.3 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms…
- CVE-2026-24751 - CVSS 8.2 (high), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external…
- CVE-2026-23638 - CVSS 6.5 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms…
- CVE-2026-23636 - CVSS 7.2 (high), 2026-03-25: Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could potentially exploit an…
- CVE-2026-23635 - CVSS 6.5 (medium), 2026-03-25: Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could…
- CVE-2026-24750 - CVSS 7.6 (high), 2026-03-25: Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper…
