Hylafax+ Project Hylafax+ — known CVE vulnerabilities

Every CVE whose affected-product data names Hylafax+ Project Hylafax+, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-15396 — CVSS 7.8 (high): In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a…
• CVE-2020-15397 — CVSS 7.8 (high): HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g…