Advisories · Technology
PaperCut NG/MF.
Every CVE that names PaperCut NG/MF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
PaperCut MF/NG: User permissions are not evaluated on report generation
- PaperCut NG/MF
- Broken access control
- CVSS 7.3 High
PaperCut NG/MF: Remote Code Execution via Scan2Fax
- PaperCut NG/MF
- Path traversal
- Command injection
- CVSS 7.5 High
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
- PaperCut NG/MF
- Code injection
- CVSS 6.9 Medium
PaperCut NG/MF: User enumeration via timing attack
- PaperCut NG/MF
- CWE-208
- CVSS 6.9 Medium
PaperCut NG/MF: Insufficient brute-force protection
- PaperCut NG/MF
- Authentication bypass
- CVSS 4.6 Medium
PaperCut NG/MF: Path Traversal in Shared Account Synchronization
- PaperCut NG/MF
- Path traversal
- Information disclosure
- CVSS 4.1 Medium
PaperCut MF: Card truncation on HP readers
- PaperCut NG/MF
- Race condition
- CWE-20
- CVSS 3.6 Low
Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices
- Papercut NG/MF
- Weak cryptography or TLS
- CVSS 2.1 Low
Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF
- PaperCut NG/MF
- Cross-site scripting (XSS)
- CVSS 8.4 HighCritical · KEV, CVSS 7+ and EPSSKEV
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
- PaperCut NG/MF
- Cross-site request forgery (CSRF)