Lucene search

[email protected]CVE-2018-13793

HistoryJul 09, 2018 - 9:29 p.m.

CVE-2018-13793

2018-07-0921:29:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2018-13793

cross site request forgery

csrf

abbyy flexicapture

http api

web verification

web scanning

web capture

monitoring

administration

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login.

Affected configurations

NVD

Node

abbyyflexicaptureMatch12.0.1.263

abbyyflexicaptureMatch12.0.1.267

abbyyflexicaptureMatch12.0.1.282

abbyyflexicaptureMatch12.0.1.292

abbyyflexicaptureMatch12.0.1.367

abbyyflexicaptureMatch12.0.1.428

abbyyflexicaptureMatch12.0.1.475

CPENameOperatorVersion
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.263
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.267
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.282
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.292
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.367
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.428
abbyy:flexicaptureabbyy flexicaptureeq12.0.1.475

CPE	Name	Operator	Version
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.263
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.267
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.282
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.292
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.367
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.428
abbyy:flexicapture	abbyy flexicapture	eq	12.0.1.475

References

abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CVE-2018-13793

prion1 cvelist1 nvd1