What’s Vulnerable › Vulnerabilities

CVE-2018-13791

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-09 · updated 2026-06-17
• Weakness: CWE-732

Description

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter.

Affected products

• Abbyy Flexicapture: 12.0.1.263, 12.0.1.267, 12.0.1.282, 12.0.1.292, 12.0.1.367, 12.0.1.428 (+1)

References

• http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf
• http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf

Get alerted when CVE-2018-13791 or the next vulnerability affects your stack