Skip to content
OpenAdvisories

Vendor

Kiuwan

5 known vulnerabilities.

Products

SAST 4 SAST Local Analyzer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-24069

    Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST

    Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application. Kiuwan Cloud was affected, and Kiuwan SAST on-premise (KOP) was affected before 2.8.2509.4.

    Kiuwan SAST
  • Medium 6.5
    CVE-2023-49112

    Insecure Direct Object Reference in Kiuwan SAST

    Kiuwan provides an API endpoint /saas/rest/v1/info/application to get information about any application, providing only its name via the "application" parameter. This endpoint lacks proper access control mechanisms, allowing other authenticated users to read …

    Kiuwan SAST
  • Medium 6.5
    CVE-2023-49111

    Reflected Cross-Site-Scripting in Kiuwan SAST

    For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page "login.html". This is possible due to the request parameter "message" values being directly included in a J…

    Kiuwan SAST