CVE-2016-1487

Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...

CVE-2016-1487

CVE-2016-1487 affects Lexmark Markvision Enterprise prior to 2.3.0, where unsafe deserialization of untrusted Java objects in Apache Commons Collections via the RMI interface enables remote code execution. The root cause is deserialization of unauthenticated serialized objects, allowing an attack...

CVE-2016-6918

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

Design/Logic Flaw

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

CVE-2016-6918

Summary: CVE-2016-6918 affects Lexmark Markvision Enterprise (MVE) prior to version 2.4.1, where a remote attacker can execute arbitrary commands by uploading files. The connected documents consistently describe this as a vulnerability in MVE before 2.4.1 with no explicit exploitation details inc...

CVE-2016-6918

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

Cross-Site Scripting Vulnerability in Multiple Lexmark Products

The Lexmark CS31x, among others, is a printer from Lexmark USA. A cross-site scripting vulnerability exists in the web server built into several Lexmark products, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

CVE-2011-4538: Exposure of Sensitive Information to an Unauthorized Actor

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings...

PT-2020-7117

Name of the Vulnerable Software and Affected Versions Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 Description The issue allows attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut. Recommendations For Lexmark X, W, T, E, C, 6500e,...

CVE-2011-3269: Exposure of Sensitive Information to an Unauthorized Actor

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut...

PT-2020-7139

Name of the Vulnerable Software and Affected Versions Lexmark X, W, T, E, and C devices before 2012-02-09 Description The issue allows attackers to obtain sensitive information by reading passwords within exported settings. Recommendations For Lexmark X, W, T, E, and C devices before 2012-02-09,...

PT-2020-8051

Name of the Vulnerable Software and Affected Versions: Lexmark Markvision Enterprise MVE versions prior to 2.4.1 Description: The issue allows remote attackers to execute arbitrary commands by uploading files. Recommendations: For versions prior to 2.4.1, update to version 2.4.1 or later to resol...

Cross-site scripting vulnerability in multiple Lexmark products (CNVD-2020-19522)

The Lexmark CS31x, among others, is a printer from Lexmark USA. A cross-site scripting vulnerability exists in the web server built into several Lexmark products, which stems from a lack of proper validation of client-side data by the WEB application and can be exploited by an attacker to execute...

PT-2020-8017

Name of the Vulnerable Software and Affected Versions: Lexmark Markvision Enterprise versions prior to 2.3.0 Description: The issue is related to the misuse of the Apache Commons Collections Library, which leads to remote code execution due to Java deserialization. Recommendations: For versions...

CVE-2016-1487: Deserialization of Untrusted Data

Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...

CVE-2016-6918: Unrestricted Upload of File with Dangerous Type

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

CVE-2019-19772

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=ENUS...

CVE-2019-19772

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=ENUS...

CVE-2019-19773

Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=ENUS...

CVE-2019-19773

Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=ENUS...