Kovai vulnerabilities
We track 2 vulnerabilities in Kovai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 3, 2026.
2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score
Latest Kovai vulnerabilities
- 8.3 High severity
Biztalk360: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Biztalk360 before 11.5. Because of mishandling of user-provided input in an upload mechanism, an authenticated attacker is able to write files outside of the destination directory and/or coerce an authentication from the service, aka
- 8.8 High severity
Biztalk360: Unrestricted Upload of File with Dangerous Type
An issue was discovered in Biztalk360 before 11.5. Because of incorrect access control, any user is able to request the loading a DLL file. During the loading, a method is called. An attacker can craft a malicious DLL, upload it to the server, and use it to ac