CVE-2018-13792: Abbyy Flexicapture

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder, filter, or Order parameter.

Affected products

• Abbyy Flexicapture: from 12.0, before 12.0.2.1194 (fixed in 12.0.2.1194)

Published 2019-02-10. Last modified 2026-06-17.