CVE-2016-1487: Deserialization of Untrusted Data

Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...

CVE-2016-6918: Unrestricted Upload of File with Dangerous Type

Lexmark Markvision Enterprise MVE before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files...

PT-2020-8051

Name of the Vulnerable Software and Affected Versions: Lexmark Markvision Enterprise MVE versions prior to 2.4.1 Description: The issue allows remote attackers to execute arbitrary commands by uploading files. Recommendations: For versions prior to 2.4.1, update to version 2.4.1 or later to resol...

PT-2020-8017

Name of the Vulnerable Software and Affected Versions: Lexmark Markvision Enterprise versions prior to 2.3.0 Description: The issue is related to the misuse of the Apache Commons Collections Library, which leads to remote code execution due to Java deserialization. Recommendations: For versions...

CVE-2014-8741

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-8741

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2014-8741

CVE-2014-8741 documents a directory traversal vulnerability in the Lexmark MarkVision Enterprise product, specifically the GfdFileUploadServerlet servlet, before version 2.1. The issue allows a remote attacker to write to arbitrary files via unspecified vectors, with public references noting poss...

CVE-2014-8742

Lexmark MarkVision Enterprise prior to 2.1 is affected by CVE-2014-8742, a directory traversal vulnerability in the ReportDownloadServlet that allows remote attackers to read arbitrary files. The root cause is improper handling/sanitization of input leading to unauthorized file disclosure. Some s...

CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-8741: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2014-8742: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

Lexmark Markvision Enterprise Java Object Deserialization RCE

The remote Lexmark Markvision Enterprise server is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a specially crafted...

Lexmark Markvision Enterprise LibraryFileUploadServlet Directory Traversal (CVE-2014-9375)

A directory traversal vulnerability has been reported in Lexmark Markvision Enterprise. The vulnerability is due to insufficient input validation in LibraryFileUploadServlet when processing zip files. A remote, unauthenticated attacker could exploit this vulnerability by enticing the target user ...

Lexmark MarkVision Enterprise GfdFileUploadServlet Directory Traversal - Ver2 (CVE-2014-8741)

A directory traversal vulnerability exists in Lexmark MarkVision Enterprise. The vulnerability is due to an input validation issue when processing user supplied data used for writing files to the system by the GfdFileUploadServlet servlet. A remote unauthenticated attacker could exploit this...

Lexmark Markvision Enterprise LibraryFileUploadServlet servlet directory traversal vulnerability

Lexmark Markvision Enterprise is the United States Lexmark Lexmark a set of Web-based network device management software. The software is mainly used to manage network devices such as printers, such as providing some printer drivers for Unix systems. A directory traversal vulnerability exists in...

CVE-2014-9375

Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. dot dot in a file path in a ZIP archive...

CVE-2014-9375

Lexmark Markvision Enterprise’s LibraryFileUploadServlet is vulnerable to a directory-traversal in ZIP processing. A crafted ZIP can write arbitrary files and allow remote code execution. ZDI-15-046 reports that authentication is not required and an attacker could upload files to arbitrary locati...