Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Kofax Component: Front Office Server Clear all filters
TI-2018-12337 CVE-2018-17289 · GHSA-4w37-q3jv-2mwp

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration…

Priority LOW 32

An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01514 Published 2019-04-18 No fix listed CWE-611
TI-2018-12336 CVE-2018-17288 · GHSA-3468-ffhm-49jw

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration…

Priority LOW 25

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/documen…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00632 Published 2019-04-18 No fix listed CWE-79
TI-2018-12335 CVE-2018-17287 · GHSA-pjpc-vgm9-wp5g

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as…

Priority LOW 23

In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, a…

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.00426 Published 2019-04-18 No fix listed CWE-311