Hylafax Enterprise

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-15397 Jun 30, 12:15 HIGH POC PATCH This Week

HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Hylafax Hylafax Enterprise Ifax

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2020-15396 Jun 30, 12:15 HIGH POC PATCH This Week

In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Race Condition Fedora Leap Backports Sle +5

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2020-15397

EPSS 1% CVSS 7.8

HIGH POC PATCH This Week

Information Disclosure Hylafax Hylafax Enterprise +1

NVD

CVE-2020-15396

EPSS 0% CVSS 7.8

HIGH POC PATCH This Week

Privilege Escalation Race Condition Fedora +7

NVD