CVE-2017-1000027: Koozali Sme Server

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user web login function resulting in unauthorized account access.

Affected products

• Koozali Sme Server: version 8.0 only; version 9.0 only; version 9.2 only; version 10.0 only

Published 2017-07-17. Last modified 2026-06-17.