Read the docs

Kofax

Records109All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high71CVSS 7.0–8.9

Exploited now

Kofax records in CISA KEV

No Kofax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Front Office Server 3 records LOW Printix 2 records MEDIUM Kofax E-transactions Sender Sendbox 1 record LOW

Records

3 records in Front Office Server · all components

TI-2018-12337 CVE-2018-17289 · GHSA-4w37-q3jv-2mwp

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration…

Priority LOW 32

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01514 Published 2019-04-18 No fix listed CWE-611
TI-2018-12336 CVE-2018-17288 · GHSA-3468-ffhm-49jw

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration…

Priority LOW 25

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/documen…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00632 Published 2019-04-18 No fix listed CWE-79
TI-2018-12335 CVE-2018-17287 · GHSA-pjpc-vgm9-wp5g

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as…

Priority LOW 23

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, a…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.00426 Published 2019-04-18 No fix listed CWE-311
Open these records in search →