« Volver al listado

CVE-2018-13793

Estado: ModificadaAlta (8.8)—

Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Abbyy — Flexicapture

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2018-13793",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-07-09T21:29:00.283",
  "references": [
    {
      "url": "http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://abbyydownloads.com/fc12/PreviousReleaseNotes/ReleaseNotes_FC12_R1_U3_1299.18_build_12.0.1.516.pdf",
      "tags": [
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple Cross Site Request Forgery (CSRF) vulnerabilities in the HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 exist in Web Verification, Web Scanning, Web Capture, Monitoring and Administration, and Login."
    },
    {
      "lang": "es",
      "value": "Existen múltiples vulnerabilidades de Cross-Site Request Forgery (CSRF) en la API HTTP en ABBYY FlexiCapture, en versiones anteriores a la 12, Release 1, Update 7. Se encuentran en: Web Verification, Web Scanning, Web Capture, Monitoring and Administration y Login."
    }
  ],
  "lastModified": "2026-06-17T01:40:10.680",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.263:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB097A81-84BE-4EE9-9EE9-BC367029D612"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.267:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C4F07E4-B212-4087-ADD1-0157B17565BE"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.282:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A89CBEB-87BD-42F7-AF04-50C7148609CD"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.292:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBA7683D-0CC1-4E0E-8EC2-0980B0FBEB0A"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.367:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BBFCC8A-C4B5-4417-8D16-D66B14844D73"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.428:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB6AFDB9-EAA6-4503-BC46-427A942F12CE"
            },
            {
              "criteria": "cpe:2.3:a:abbyy:flexicapture:12.0.1.475:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C20CD146-8608-4622-A548-D6C13685CF4B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}