VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 9, 2018· Updated Jun 17, 2026

CVE-2018-13791

CVE-2018-13791

Description

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.

Affected products

8
  • ABBYY/FlexiCapture8 versions
    cpe:2.3:a:abbyy:flexicapture:12.0.1.263:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.263:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.267:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.282:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.292:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.367:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.428:*:*:*:*:*:*:*
    • cpe:2.3:a:abbyy:flexicapture:12.0.1.475:*:*:*:*:*:*:*
    • (no CPE)range: <12 Release 1 Update 7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.