CyberSecBulletin

Kiuwan vulnerabilities

We track 2 vulnerabilities in Kiuwan products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Kiuwan vulnerabilities

  • 7.8 High severity

    SAST Local Analyzer: Cleartext Storage of Sensitive Information

    CVE-2023-49113Kiuwan

    The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the K

  • 7.2 High severity

    SAST: Improper Restriction of XML External Entity Reference

    CVE-2023-49110Kiuwan

    When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud/SaaS solution), the transmitted data consists of a ZIP archive containing several files, some of them in the XML file format. During Kiuwan'