CVE-2018-17288

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities…

published April 18, 2019

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - (Thin Client) or (2) "DeviceName" field in /Kofax/KFS/Admin/DeviceService/device/ - (Administration Console).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.7th percentile
Published
2019-04-18T17:42Z
EPSS history
Timeline
  • 18 APR 17:42Z
    Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities…
    cvelistv5