CVE-2018-13791

CRITICAL 9.8CVE-2018-13791 · Published 09/07/2018 · updated 17/06/2026

In short

CVE-2018-13791 is a CRITICAL (CVSS 9.8) vulnerability affecting flexicapture (abbyy).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
flexicapture abbyy	`= 12.0.1.263= 12.0.1.267= 12.0.1.282= 12.0.1.292= 12.0.1.367= 12.0.1.428= 12.0.1.475`	No fix yet

Description

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.

References

abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf · Release Notes

More vulnerabilities in flexicapture

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free