Kerio Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Firewall Software	34
Mail Server Software	16
Not Defined	8

Product

Kerio Personal Firewall	16
Kerio WinRoute Firewall	14
Kerio MailServer	12
Kerio Unified Threat Management	6
Kerio Mailserver	4

Remediation

Official Fix	40
Temporary Fix	0
Workaround	6
Unavailable	0
Not Defined	12

Exploitability

High	2
Functional	0
Proof-of-Concept	26
Unproven	0
Not Defined	30

Access Vector

Not Defined	0
Physical	0
Local	16
Adjacent	0
Network	42

Authentication

Not Defined	0
High	0
Low	12
None	46

User Interaction

Not Defined	0
Required	4
None	54

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	12
≤5	2
≤6	18
≤7	10
≤8	12
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	14
≤5	10
≤6	16
≤7	10
≤8	4
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	12
≤5	2
≤6	18
≤7	10
≤8	12
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	6
<2k	24
<5k	24
<10k	0
<25k	2
<50k	0
<100k	2
≥100k	0

Exploit Today

<1k	58
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (12): AVG plugin (1), Connect (1), Connect Client Desktop Application (1), Control (1), MailServer (12), Mailserver (7), Personal Firewall (15), Unified Threat Management (5), WebServer (1), WinRoute Firewall (11), Winroute Firewall (2), personal firewall (1)

Link to Vendor Website: http://kerio.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
05/02/2017	6.4	6.4	Kerio Connect/Connect Client Desktop Application E-Mail Preview input validation	Unknown	Not Defined	Not Defined	0.00185	0.05	CVE-2017-7440
09/22/2016	7.3	6.7	Kerio Unified Threat Management Login excessive authentication	Unknown	Not Defined	Official Fix	0.00000	0.00
09/22/2016	4.3	4.0	Kerio Unified Threat Management PHP Memory information disclosure	Unknown	Not Defined	Official Fix	0.00000	0.02
09/22/2016	3.5	3.2	Kerio Unified Threat Management Reflected cross site scripting	Unknown	Not Defined	Official Fix	0.00000	0.00
09/22/2016	6.3	5.8	Kerio Unified Threat Management CSRF Prevention privileges management	Unknown	Not Defined	Official Fix	0.00000	0.00
09/22/2016	6.3	5.8	Kerio Unified Threat Management memory corruption	Unknown	Not Defined	Official Fix	0.00000	0.02
07/03/2014	6.3	5.7	Kerio Control print.php sql injection	Unknown	Proof-of-Concept	Official Fix	0.00103	0.03	CVE-2014-3857
03/22/2011	7.3	7.3	Kerio MailServer input validation	Mail Server Software	Not Defined	Not Defined	0.00202	0.00	CVE-2011-1506
06/08/2009	4.3	4.1	Kerio MailServer cross site scripting	Mail Server Software	Not Defined	Official Fix	0.00162	0.00	CVE-2009-2636
12/30/2008	4.3	3.9	Kerio MailServer mailCompose.php cross site scripting	Mail Server Software	Proof-of-Concept	Official Fix	0.00259	0.00	CVE-2008-5769

47 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 47 results.

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!