CVE-2018-13792

—

CVSS 3.1

9.8 critical

EPSS

1%p61

Published

Feb 10, 2019 (Feb 10, 2019)

Modified

Jun 17, 2026

Description

Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter.

Vendors: abbyy
Products: flexicapture
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.