Vulnerabilities > Abbyy > Flexicapture
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-02-10 | CVE-2018-13792 | SQL Injection vulnerability in Abbyy Flexicapture Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter. | 9.8 |
| 2018-07-09 | CVE-2018-13793 | Cross-Site Request Forgery (CSRF) vulnerability in Abbyy Flexicapture Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login. | 8.8 |
| 2018-07-09 | CVE-2018-13791 | Incorrect Permission Assignment for Critical Resource vulnerability in Abbyy Flexicapture The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter. | 9.8 |