CVE-2024-7874: Improper Neutralization of Input During Web Page Generation

Tungsten Automation Kofax TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks through mfpConnectionId parameter manipulation in a form sent to endpoints "/TotalAgility/Kofax/BrowserDevice/ScanFront.aspx"...

PT-2024-38651

Name of the Vulnerable Software and Affected Versions Tungsten Automation Kofax TotalAgility versions all through 7.9.0.25.0.954 Description The issue allows for Reflected XSS attacks through manipulation of the mfpScreenResolutionWidth parameter in a form sent to the...

CVE-2024-7875: Improper Neutralization of Input During Web Page Generation

Tungsten Automation Kofax TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks through mfpScreenResolutionWidth parameter manipulation in a form sent to an endpoint /TotalAgility/Kofax/BrowserDevice/ScanFront.aspx This allows for injection of a malicious...