Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-13791

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2018-13791
  • Abbyy » Flexicapture » Version: 12.0.1.263
    cpe:2.3:a:abbyy:flexicapture:12.0.1.263
  • Abbyy » Flexicapture » Version: 12.0.1.267
    cpe:2.3:a:abbyy:flexicapture:12.0.1.267
  • Abbyy » Flexicapture » Version: 12.0.1.282
    cpe:2.3:a:abbyy:flexicapture:12.0.1.282
  • Abbyy » Flexicapture » Version: 12.0.1.292
    cpe:2.3:a:abbyy:flexicapture:12.0.1.292
  • Abbyy » Flexicapture » Version: 12.0.1.367
    cpe:2.3:a:abbyy:flexicapture:12.0.1.367
  • Abbyy » Flexicapture » Version: 12.0.1.428
    cpe:2.3:a:abbyy:flexicapture:12.0.1.428
  • Abbyy » Flexicapture » Version: 12.0.1.475
    cpe:2.3:a:abbyy:flexicapture:12.0.1.475


Contact Us

Shodan ® - All rights reserved