Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2024/03/14 3:15 a.m.•17 views

CVE-2024-1223

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...

4.8CVSS5.6AI score0.00445EPSS
SaveExploits0References1
NVD
NVD
•added 2024/03/14 3:15 a.m.•47 views

CVE-2024-1223

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...

4.8CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/14 3:04 a.m.•36 views

CVE-2024-1223 Improper authorization controls in PaperCut NG/MF

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...

4.8CVSS4.8AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/14 3:04 a.m.•54 views

CVE-2024-1223 Improper authorization controls in PaperCut NG/MF

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...

4.8CVSS5.2AI score0.00445EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/14 12:00 a.m.•4 views

CVE-2024-1223: Exposure of Data Element to Wrong Session

This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge of some combination of valid usernames, device names and an internal system key. For such an attack to be successful the system must be in ...

4.8CVSS5.8AI score0.00445EPSS
SaveExploits0References2
Rows per page
Query Builder