Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Ifax

First CVE: May 19, 2020Active for: 6 yearsTotal CVEs: 3

Ifax develops HylaFAX, an enterprise fax transmission and management platform that handles document routing and system integration in communications infrastructure. The vendor's observed vulnerability exposure centers on race conditions in concurrent resource handling, OS command injection in fax-processing workflows, and improper permission assignment for critical resources—weakness classes typical of systems that parse untrusted input and manage privileged operations. Current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
3
Total CVEs
More Total CVEs than 72% of tracked vendors
1.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 76% of tracked vendors
8.1
Avg CVSS Score
Higher Avg CVSS Score than 79% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Ifax over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 19, 2020
6 years ago
Most Recent CVE
Jun 30, 2020
2,215 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-11766HIGH
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
May 19, 20208.828NONO
CVE-2020-15397HIGH
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are
Jun 30, 20207.825NONO
CVE-2020-15396HIGH
In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalat
Jun 30, 20207.820NONO
View all 3 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products3 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
High
Attack Vector
Local2 (66.7%)
Network1 (33.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (100.0%)
High0 (0.0%)
None0 (0.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Ifax.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Ifax — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Ifax's Products

View all 1 CNAs →

Top CWEs