AV
Product
Avantfax
6
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 0
Watch
Add Avantfax to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1782 | 9.9 | Apr 14 | Unsanitized input in language form field Affected: before 3.4.1 |
| CVE-2023-23328 | 8.8 | Mar 10 | A File Upload vulnerability exists in AvantFAX 3.3.7 Affected: 3.3.7 |
| CVE-2020-11766 | 8.8 | May 19 | sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection Affected: 3.3.0 before 3.3.6 |
| CVE-2017-18024 | 6.1 | Jan 10 | AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1 Affected: 3.3.3 |
| CVE-2023-23326 | 5.4 | Mar 10 | A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7 Affected: 3.3.7 |
| CVE-2023-23327 | 4.9 | Mar 10 | An Information Disclosure vulnerability exists in AvantFAX 3.3.7 Affected: 3.3.7 |
Showing 6
