Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Actfax Clear all filters
TI-2019-15364 CVE-2019-25310 · GHSA-x522-cqqg-xqx7

ActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path

Priority HIGH 72

ActiveFax Server 6.92 Build 0316 contains an unquoted service path vulnerability in the ActiveFaxServiceNT service that allows local attackers to potentially execute arbitrary code.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-02-11 No fix listed CWE-428
TI-2023-30237 CVE-2023-53954 · GHSA-6hw7-52j7-xmq2

ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability

Priority HIGH 76

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00138 Published 2025-12-19 No fix listed CWE-428
TI-2012-05466 CVE-2012-10043 · GHSA-hjc5-mwx5-gc6h

ActFax 4.32 Client Importer Buffer Overflow

Priority HIGH 75

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00447 Published 2025-08-08 No fix listed CWE-121
TI-2020-12471 CVE-2020-15843 · GHSA-pqx5-jwv2-ffhr

ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation…

Priority LOW 32

ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client\, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFIL…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00398 Published 2020-09-24 No fix listed CWE-276