AV
Vendor
Avantfax
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1782 | AV Avantfax Avantfax | 9.9 | Apr 14 | Unsanitized input in language form field |
| CVE-2023-23328 | AV Avantfax Avantfax | 8.8 | Mar 10 | A File Upload vulnerability exists in AvantFAX 3.3.7 |
| CVE-2023-23327 | AV Avantfax Avantfax | 4.9 | Mar 10 | An Information Disclosure vulnerability exists in AvantFAX 3.3.7 |
| CVE-2023-23326 | AV Avantfax Avantfax | 5.4 | Mar 10 | A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7 |
| CVE-2020-11766 | AV Avantfax Avantfax | 8.8 | May 19 | sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection |
| CVE-2017-18024 | AV Avantfax Avantfax | 6.1 | Jan 10 | AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1 |