Lucene search
K

6 matches found

NVD
NVD
added 2020/01/27 6:15 p.m.15 views

CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

7.8CVSS7.4AI score0.08102EPSS
Exploits1References2
Prion
Prion
added 2020/01/27 6:15 p.m.13 views

Directory traversal

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

7.8CVSS7.1AI score0.08102EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/01/27 5:29 p.m.18 views

CVE-2014-8742

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors...

7.4AI score0.08102EPSS
Exploits1References2
CVE
CVE
added 2020/01/27 5:29 p.m.47 views

CVE-2014-8742

Lexmark MarkVision Enterprise prior to 2.1 is affected by CVE-2014-8742, a directory traversal vulnerability in the ReportDownloadServlet that allows remote attackers to read arbitrary files. The root cause is improper handling/sanitization of input leading to unauthorized file disclosure. Some s...

7.8CVSS7.3AI score0.08102EPSS
Exploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/01/15 12:0 a.m.30 views

Lexmark MarkVision Enterprise ReportDownloadServlet Information Disclosure

Nessus was able to exploit an information disclosure vulnerability in Lexmark MarkVision Enterprise due to improper handling of user input to the 'ReportDownloadServlet' servlet. A remote, unauthenticated attacker can exploit this issue to read arbitrary files C Tenable Network Security, Inc...

7.8CVSS7.5AI score0.08102EPSS
Exploits1References3
0day.today
0day.today
added 2014/12/10 12:0 a.m.44 views

Lexmark MarkVision Enterprise ReportDownloadServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Lexmark MarkVision Enterprise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReportDownloadServlet class. The class contains a method that does n...

8.2AI score0.08102EPSS
Exploits1
Rows per page
Query Builder