VYPR

MFT

by Kiteworks

CVEs (2)

  • CVE-2025-53896HigNov 29, 2025
    risk 0.46cvss 7.1epss 0.00

    Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0.

  • CVE-2022-24110MedFeb 14, 2022
    risk 0.42cvss 6.5epss 0.01

    Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.