What’s Vulnerable › Products

GFI KerioConnect vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your GFI KerioConnect version is affected

Latest GFI KerioConnect vulnerabilities

• CVE-2025-2977 — GFI KerioConnect PDF File cross site scripting (CVSS 5.4)
• CVE-2025-2976 — GFI KerioConnect File Upload cross site scripting (CVSS 5.4)
• CVE-2025-2975 — GFI KerioConnect Signature EditHtmlSource cross site scripting (CVSS 5.4)
• CVE-2023-25267 — (CVSS 8.8)
• CVE-2017-7440 — (CVSS 6.5)