Vulnerability Details CVE-2018-13791
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2018-13791
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.263
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.267
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.282
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.292
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.367
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.428
-
cpe:2.3:a:abbyy:flexicapture:12.0.1.475