Security Advisory

CVE-2018-17288

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-18 17:42:22

Last updated 2024-08-05 10:47:04

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - (Thin Client) or (2) "DeviceName" field in /Kofax/KFS/Admin/DeviceService/device/ - (Administration Console).

← Browse all CVEs View on cve.org ↗