Kerio Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Firewall Software	24
Mail Server Software	22
Not Defined	10
Web Server	2

Product

Kerio Personal Firewall	16
Kerio MailServer	14
Kerio Mailserver	8
Kerio WinRoute Firewall	8
Kerio Unified Threat Management	4

Remediation

Official Fix	36
Temporary Fix	0
Workaround	4
Unavailable	2
Not Defined	16

Exploitability

High	2
Functional	2
Proof-of-Concept	16
Unproven	0
Not Defined	38

Access Vector

Not Defined	0
Physical	0
Local	14
Adjacent	0
Network	44

Authentication

Not Defined	0
High	0
Low	8
None	50

User Interaction

Not Defined	0
Required	10
None	48

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	12
≤5	8
≤6	18
≤7	6
≤8	8
≤9	0
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	16
≤5	12
≤6	12
≤7	8
≤8	4
≤9	4
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	12
≤5	8
≤6	18
≤7	6
≤8	8
≤9	0
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	6
<2k	28
<5k	18
<10k	0
<25k	6
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	58
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (12): AVG plugin (1), Connect (1), Connect Client Desktop Application (1), Control (1), MailServer (12), Mailserver (7), Personal Firewall (15), Unified Threat Management (5), WebServer (1), WinRoute Firewall (11), Winroute Firewall (2), personal firewall (1)

Link to Vendor Website: http://kerio.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	CTI	EPSS	CVE
05/02/2017	6.4	6.4	Kerio Connect/Connect Client Desktop Application E-Mail Preview input validation	Unknown	Not Defined	Not Defined	0.05	0.00147	CVE-2017-7440
09/22/2016	7.3	6.7	Kerio Unified Threat Management Login excessive authentication	Unknown	Not Defined	Official Fix	0.00	0.00000
09/22/2016	4.3	4.0	Kerio Unified Threat Management PHP Memory information disclosure	Unknown	Not Defined	Official Fix	0.05	0.00000
09/22/2016	3.5	3.2	Kerio Unified Threat Management Reflected cross site scripting	Unknown	Not Defined	Official Fix	0.00	0.00000
09/22/2016	6.3	5.8	Kerio Unified Threat Management CSRF Prevention privileges management	Unknown	Not Defined	Official Fix	0.00	0.00000
09/22/2016	6.3	5.8	Kerio Unified Threat Management memory corruption	Unknown	Not Defined	Official Fix	0.03	0.00000
07/03/2014	6.3	5.7	Kerio Control print.php sql injection	Unknown	Proof-of-Concept	Official Fix	0.03	0.00176	CVE-2014-3857
03/22/2011	7.3	7.3	Kerio MailServer input validation	Mail Server Software	Not Defined	Not Defined	0.00	0.00202	CVE-2011-1506
06/08/2009	4.3	4.1	Kerio MailServer cross site scripting	Mail Server Software	Not Defined	Official Fix	0.02	0.00254	CVE-2009-2636
12/30/2008	4.3	3.9	Kerio MailServer mailCompose.php cross site scripting	Mail Server Software	Proof-of-Concept	Official Fix	0.00	0.00259	CVE-2008-5769

47 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 47 results.

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!