Vendor/product archive

abbyy / flexicapture CVEs

Beta · best-effort

3 CVEs tagged to abbyy / flexicapture — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to abbyy vendor archive

CVE-2018-13792

Published Feb 10, 2019

Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-13793

Published Jul 9, 2018

Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture,…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2018-13791

Published Jul 9, 2018

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCapt…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1