Advisories · Technology

PaperCut NG.

Every CVE that names PaperCut NG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-39470 CVE record

CVSS 7.2 High

PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
- PaperCut NG
- CWE-749
Not analysed yet 22 Nov 2024
CVE-2023-39469 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability
- PaperCut NG
- Code injection
Not analysed yet 3 May 2024
CVE-2023-4568 CVE record

CVSS 6.5 Medium

PaperCut NG Unauthenticated XMLRPC
- PaperCut NG
- Authentication bypass
Not analysed yet 13 Sept 2023
CVE-2023-3486 CVE record

CVSS 8.2 HighCritical · CVSS 7+ and EPSS

PaperCut NG Unauthenticated File Upload
- PaperCut NG
- Unrestricted file upload
Not analysed yet 25 Jul 2023
CVE-2023-27351 CVE record

CVSS 8.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Improper authentication in PaperCut NG
- PaperCut NG
- Authentication bypass
Not analysed yet 20 Apr 2023
CVE-2023-27350 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Improper access control in PaperCut NG
- PaperCut NG
- Broken access control
Not analysed yet 20 Apr 2023