Ifax Hylafax
2 CVEs affecting Ifax Hylafax. Latest disclosed: 2025-04-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1782 | Critical | 9.9 | 2025-04-14 | In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbit… |
CVE-2020-11766 | High | 8.8 | 2020-05-19 | sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection. |