CVE-2014-8741

🗓️ 27 Jan 2020 17:29:28Reported by mitreType

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

CVE-2014-8741: Directory traversal vulnerability in Lexmark MarkVision Enterprise before 2.

Reporter	Title	Published	Views	Family All 16
0day.today	Lexmark MarkVision Enterprise GfdFileUploadServlet Remote Code Execution Vulnerability	10 Dec 201400:00	–	zdt
0day.today	Lexmark MarkVision Enterprise Arbitrary File Upload Exploit	14 Jan 201500:00	–	zdt
Circl	CVE-2014-8741	13 Jan 201500:00	–	circl
Check Point Advisories	Lexmark MarkVision Enterprise GfdFileUploadServlet Directory Traversal (CVE-2014-8741)	11 Jan 201500:00	–	checkpoint_advisories
Check Point Advisories	Lexmark MarkVision Enterprise GfdFileUploadServlet Directory Traversal - Ver2 (CVE-2014-8741)	26 Mar 201500:00	–	checkpoint_advisories
Cvelist	CVE-2014-8741	27 Jan 202017:29	–	cvelist
Dsquare	Lexmark MarkVision Enterprise 2.0 File Upload	13 Jan 201500:00	–	dsquare
Exploit DB	Lexmark MarkVision Enterprise - Arbitrary File Upload (Metasploit)	13 Jan 201500:00	–	exploitdb
Tenable Nessus	Lexmark MarkVision Enterprise < 2.1 Multiple Vulnerabilities	22 Dec 201400:00	–	nessus
Tenable Nessus	Lexmark MarkVision Enterprise GfdFileUploadServerlet RCE Vulnerability	15 Jan 201500:00	–	nessus

NVD

Node

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-14-410/
support	www.support.lexmark.com/index

Parameter	Position	Path	Description	CWE
datafile	request body	mve/upload/gfd	Directory traversal vulnerability allowing arbitrary file upload via the mve/upload/gfd endpoint in Lexmark MarkVision Enterprise <=2.0, enabling potential code execution.	CWE-22

21 Nov 2024 02:19Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 210

EPSS0.7035