CVE-2018-13793

CVE-2018-13793 concerns ABBYY FlexiCapture’s HTTP API with multiple CSRF vulnerabilities affecting Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login prior to 12 Release 1 Update 7. The affected surface is the HTTP API in the mentioned modules; exploitation deta...

CVE-2018-13791

CVE-2018-13791 affects ABBYY FlexiCapture before 12 Release 1 Update 7. The HTTP API vulnerability enables access control bypass through the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter, exposing partial to high-impact consequences per the provided CVSS data (network...

CVE-2018-13792

Technical details such as affected versions, root cause, and remediation are not publicly provided in the supplied documents. Monitor for updates.