Avantfax

CVE-2025-1782 Apr 14, 19:15 CRITICAL Act Now

Rejected reason: Red Hat Product Security has come to the conclusion that this CVE is not needed. No vendor patch available.

CVE-2023-23328 Mar 10, 22:15 HIGH POC This Week

A File Upload vulnerability exists in AvantFAX 3.3.7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23327 Mar 10, 22:15 MEDIUM POC This Month

An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-23326 Mar 10, 22:15 MEDIUM POC This Month

A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2020-11766 May 19, 20:15 HIGH This Week

sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.