Skip to content
OpenAdvisories

Vendor

Kiuwan

5 known vulnerabilities.

Products

SAST 4 SAST Local Analyzer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2023-49113

    Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer

    The Kiuwan Local Analyzer (KLA) Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the …

    Kiuwan SAST Local Analyzer
  • High 7.2
    CVE-2023-49110

    XML External Entity Injection in Kiuwan SAST

    When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application (either on-premises or cloud/SaaS solution), the transmitted data consists of a ZIP archive containing several files, some of them in the XML file format. During Kiuwan…

    Kiuwan SAST