CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/12/06 9:15 p.m.•18 views

CVE-2024-7875

Tungsten Automation Kofax TotalAgility in versions all through 7.9.0.25.0.954 is vulnerable to a Reflected XSS attacks through mfpScreenResolutionWidth parameter manipulation in a form sent to an endpoint /TotalAgility/Kofax/BrowserDevice/ScanFront.aspx This allows for injection of a malicious...

5.3CVSS0.00503EPSS

Exploits0References3

Vulnrichment•added 2024/12/06 8:55 p.m.•9 views

CVE-2024-7875 XSS in Tungsten Automation TotalAgility

5.3CVSS6.3AI score0.00503EPSS

Exploits0References3

CVE•added 2024/12/06 8:55 p.m.•54 views

CVE-2024-7875

CVE-2024-7875 affects Tungsten Automation (Kofax) TotalAgility up to version 7.9.0.25.0.954. The vulnerability is a Reflected XSS in the ScanFront.aspx endpoints where mfpScreenResolutionWidth is manipulated via POST data. An attacker can inject JavaScript code, leading to information disclosure,...

5.3CVSS6.2AI score0.00503EPSS

Exploits0References3