Kaltura
5 CVEs tracked since 2017. Since Mar 2017, none of them reached CISA KEV.
Kaltura CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2017-03 | 2 | 0 |
| 2017-04 | null or fewer | |
| 2017-05 | null or fewer | |
| 2017-06 | null or fewer | |
| 2017-07 | null or fewer | |
| 2017-08 | null or fewer | |
| 2017-09 | 3 | 0 |
Products
The products that kept showing up in Kaltura's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 10 most recently published vulnerabilities affecting Kaltura.
- CVE-2026-19913CVE-2026-199137.5
- CVE-2026-19912CVE-2026-199129.8
- CVE-2016-15044Kaltura < 11.1.0-2 PHP Object Injection RCE—
- CVE-2022-4882kaltura mwEmbed Share Plugin share.js cross site scripting2.6
- CVE-2022-4876Kaltura mwEmbed DefaultSettings.php cross site scripting3.5
- CVE-2017-14143The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and co...9.8
- CVE-2017-14141The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a cra...7.2
- CVE-2017-14142Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersion parameter to se...6.1
- CVE-2017-6392An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/admin_console/web/tools/XmlJ...6.1
- CVE-2017-6391An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "admin_console/web/tools/SimpleJWPlayer.php" URL,...6.1
The record
- Peak rank
- #103 in Sep 2017
- Busiest month shown
- Sep 2017, 3 CVEs
- Months with a KEV entry
- 0 since Mar 2017
- Monthly snapshots
- 2 since 2017