critical9.8
CVE-2018-13791
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaU…
Impact
The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abbyy | Flexicapture | Versions 12.0.1.263, 12.0.1.267, 12.0.1.282, 12.0.1.292, 12.0.1.367, 12.0.1.428 |