Read the docs

Actfax

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Actfax records in CISA KEV

No Actfax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Actfax 1 record LOW

Records

4 records

TI-2023-30237 CVE-2023-53954 · GHSA-6hw7-52j7-xmq2

ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability

Priority HIGH 76

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00138 Published 2025-12-19 No fix listed CWE-428
TI-2012-05466 CVE-2012-10043 · GHSA-hjc5-mwx5-gc6h

ActFax 4.32 Client Importer Buffer Overflow

Priority HIGH 75

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00447 Published 2025-08-08 No fix listed CWE-121
TI-2019-15364 CVE-2019-25310 · GHSA-x522-cqqg-xqx7

ActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path

Priority HIGH 72

ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-02-11 No fix listed CWE-428
TI-2020-12471 CVE-2020-15843 · GHSA-pqx5-jwv2-ffhr

ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation…

Priority LOW 32

ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client\, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFIL…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00398 Published 2020-09-24 No fix listed CWE-276
Open these records in search →