Vulnerabilities > CVE-2018-17289 - XXE vulnerability in Kofax Front Office Server 4.1.1.11.0.5212
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
An XML external entity (XXE) vulnerability in Kofax Front Office Server Administration Console version 4.1.1.11.0.5212 allows remote authenticated users to read arbitrary files via crafted XML inside an imported package configuration (.ZIP file) within the Kofax/KFS/Admin/PackageService/package/upload file parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |