CVE-2018-17288: XSS

Published Apr 18, 2019

Updated

Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and Administration Console) suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Filename" field in /Kofax/KFS/ThinClient/document/upload/ - (Thin Client) or (2) "DeviceName" field in /Kofax/KFS/Admin/DeviceService/device/ - (Administration Console).

Affected Software

1 affected component

Kofax Front Office Server=4.1.1.11.0.5212

Event History

Apr 18, 2019

CVE Published

via MITRE·05:42 PM

Data Sourced

via MITRE·05:42 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-17288?

CVE-2018-17288 has been classified as a high severity vulnerability due to its potential for exploitation via authenticated stored XSS.

How do I fix CVE-2018-17288?

To fix CVE-2018-17288, update Kofax Front Office Server to a version that addresses the XSS vulnerabilities.

What are the affected versions for CVE-2018-17288?

CVE-2018-17288 specifically affects Kofax Front Office Server version 4.1.1.11.0.5212.

What kind of vulnerabilities does CVE-2018-17288 have?

CVE-2018-17288 presents multiple authenticated stored XSS vulnerabilities.

Which components of Kofax Front Office Server are impacted by CVE-2018-17288?

The Thin Client and Administration Console components of Kofax Front Office Server are impacted by CVE-2018-17288.