Medium severity6.1NVD Advisory· Published Aug 26, 2016· Updated May 6, 2026
CVE-2016-5663
CVE-2016-5663
Description
Multiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the (1) code, (2) error, or (3) error_description parameter.
Affected products
1- cpe:2.3:a:accellion:kiteworks_appliance:*:*:*:*:*:*:*:*Range: <=kw2016.03.00
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.kb.cert.org/vuls/id/305607nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/92662nvd
News mentions
0No linked articles in our index yet.