Skip to main content

Kerio Connect

5 CVEs product

Monthly

CVE-2025-2977 Mar 31, 05:15 MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Kerio Connect Gfi
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-2976 Mar 31, 05:15 MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS File Upload Kerio Connect Gfi
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-2975 Mar 31, 04:15 MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Kerio Connect Gfi
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2023-25267 Mar 15, 22:15 HIGH POC This Week

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Kerio Connect Gfi
NVD GitHub
CVSS 3.1
8.8
EPSS
1.0%
CVE-2017-7440 May 02, 14:59 MEDIUM PATCH This Month

Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Microsoft Kerio Connect Kerio Connect Client Gfi
NVD
CVSS 3.1
6.5
EPSS
0.2%
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Kerio Connect Gfi
NVD GitHub VulDB
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS File Upload Kerio Connect +1
NVD GitHub VulDB
EPSS 0% CVSS 5.1
MEDIUM POC This Month

A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Kerio Connect Gfi
NVD GitHub VulDB
EPSS 1% CVSS 8.8
HIGH POC This Week

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Kerio Connect +1
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Microsoft Kerio Connect +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy