Vendor/product archive

kofax / front_office_server CVEs

Beta · best-effort

3 CVEs tagged to kofax / front_office_server — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to kofax vendor archive

CVE-2018-17289

Published Apr 18, 2019

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files vi…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-17288

Published Apr 18, 2019

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filenam…

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-17287

Published Apr 18, 2019

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by…

CVSS 4.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1