Kofax
Page 2 of 2 — Kofax CVEs from a corpus of 104, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5118 | Medium | 5.4 | 2024-01-11 | The application is vulnerable to Stored Cross-Site Scripting (XSS) in the endpoint /sofer/DocumentService.asc/SaveAnnotation, where input data transmitted via… |
CVE-2022-25090 | High | 8.1 | 2022-03-10 | Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escal… |
CVE-2022-25089 | Critical | 9.8 | 2022-03-03 | Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistry… |
CVE-2018-17289 | Medium | 6.5 | 2019-04-18 | An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to rea… |
CVE-2018-17288 | Medium | 5.4 | 2019-04-18 | Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities… |
CVE-2018-17287 | Medium | 4.9 | 2019-04-18 | In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value c… |
CVE-2018-6293 | High | 7.5 | 2018-02-13 | Arbitrary File Read in Saperion Web Client version 7.5.2 83166. |
CVE-2018-6292 | Critical | 9.8 | 2018-02-13 | Remote Code Execution in Saperion Web Client version 7.5.2 83166. |
CVE-2011-5294 | | 2015-01-01 | The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote at… |