49 matches found
CVE-2025-27637
Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) , identified as V-2024-016 , in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . An attacker exploiting this vulnerability could execute malicious scripts in the context of a user's web...
CVE-2025-27641
Vasion Print (formerly PrinterLogic) is vulnerable to an authentication bypass issue in versions prior to Virtual Appliance Host 22.0.951 and Application 20.0.2368 . The vulnerability stems from the presence of unauthenticated APIs for Single-Sign On (SSO), specifically related to V-2024-009 . Th...
CVE-2025-27672
Vasion Print (formerly PrinterLogic ) is vulnerable to an OAUTH Security Bypass (OVE-20230524-0016) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The vulnerability allows for improper authentication within the SaaS-based, cloud-hosted application used for managing a...
CVE-2025-27643
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to a security flaw involving a hardcoded AWS API key . This issue allows for the exposure of sensitive credentials. To remediate this vulnerability, users should update to V...
CVE-2025-27676
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 are vulnerable to Cross-Site Scripting (XSS) within the Reports V-2023-002 component. The vulnerability is caused by improper neutralization of input during web page generation. An attacke...
CVE-2025-27674
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 are vulnerable to the use of a hardcoded IdP key (V-2023-006). This flaw allows for potential unauthorized access or authentication issues due to the static nature of the cryptographic key...
CVE-2025-27639
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are susceptible to a Privilege Escalation vulnerability (referenced as V-2024-015 ). This flaw stems from Improper Privilege Management , potentially allowing an attacker to gain ele...
CVE-2025-27642
The Vasion Print (formerly PrinterLogic) application suffers from a critical vulnerability, identified as V-2024-008 , which allows unauthenticated driver package editing . This flaw exists in versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 . An attacker could exploit this...
CVE-2025-27644
Vasion Print (formerly PrinterLogic) is vulnerable to Local Privilege Escalation in versions prior to Virtual Appliance Host 22.0.933 and Application 20.0.2368 . The vulnerability is categorized under CWE-269: Improper Privilege Management . To remediate this issue, users should update to Virtual...
CVE-2025-27649
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.893 Application 20.0.2140 are vulnerable to an Incorrect Access Control flaw (PHP V-2023-016). This vulnerability stems from improper PHP access control within the SaaS-based, cloud-hosted application used for man...
CVE-2025-27663
The SaaS-based, cloud-hosted application Vasion Print (formerly PrinterLogic) is impacted by a vulnerability involving weak password encryption or encoding (OVE-20230524-0007). This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The root cause is identi...
CVE-2025-27653
Vasion Print (formerly PrinterLogic) is vulnerable to a Preauthenticated Cross-Site Scripting (XSS) flaw in the Badge Registration component. This vulnerability affects versions prior to Virtual Appliance Host 22.0.862 Application 20.0.2014 . An unauthenticated attacker could potentially execute ...
CVE-2025-27670
Vasion Print (formerly PrinterLogic) is affected by a vulnerability involving insufficient signature validation (CVE-2025-27670). The flaw exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This vulnerability allows for potential unauthorized actions due to im...
CVE-2025-27678
Vasion Print (formerly PrinterLogic) is vulnerable to Client Remote Code Execution (V-2023-001) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The root cause is identified as an improper control of generation of code (CWE-94), which may allow an attacker to execute a...
CVE-2025-27638
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are susceptible to a hardcoded password vulnerability (V-2024-013). This security flaw allows for potential unauthorized access, as the software uses a static, hardcoded credential f...
CVE-2025-27659
Vasion Print (formerly PrinterLogic), a cloud-hosted application for managing and deploying printers, is vulnerable to SQL Injection (CVE-2025-27659). This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . An attacker exploiting this vulnerability could pe...
CVE-2025-27662
Vasion Print (formerly PrinterLogic) is vulnerable to CWE-256: Plaintext Storage of a Password because the application allows passwords to be included in the URL . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The impact includes potentia...
CVE-2025-27677
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Symbolic Links For Unprivileged File Interaction (V-2022-002). This flaw arises from the use of symbolic links that can lead to unauthorized file interactions by unpr...
CVE-2025-27683
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to Driver Unrestricted Upload of File with Dangerous Type (V-2022-006). This flaw allows an attacker to upload dangerous types of driver files, which could lead to significan...
CVE-2025-27657
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Remote Code Execution (RCE) . The root cause involves improper control of generation of code (CWE-94), which allows an attacker to execute arbitrary commands on the s...
CVE-2025-27658
Vasion Print (formerly PrinterLogic) is vulnerable to an Authentication Bypass (CWE-288) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . This vulnerability allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to the SaaS-base...
CVE-2025-27682
The Vasion Print (formerly PrinterLogic) application is vulnerable to Insecure Log Permissions (V-2022-005) in versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 . The root cause is an incorrect logging permission configuration. This vulnerability can lead to unauthorized acce...
CVE-2025-27645
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to Insecure Extension Installation (V-2024-005). The root cause is the software's tendency to trust HTTP permission methods on the server side, which can lead to the unautho...
CVE-2025-27654
Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) (V-2023-017) in versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . An attacker could exploit this vulnerability to execute malicious scripts in the context of the user's session. To remedi...
CVE-2025-27665
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are susceptible to a vulnerability involving insufficient antivirus protection . This security flaw could allow drivers to contain known malicious code, specifically identified as OVE-...
CVE-2025-27675
The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to a flaw in its OpenID implementation (specifically V-2023-004 ). This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . T...
CVE-2025-27681
Vasion Print (formerly PrinterLogic ) is vulnerable in versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 due to the mishandling of Client Inter-process Security (specifically V-2022-004 ). This flaw is characterized as Client-Side Enforcement of Server-Side Security (CWE-602)...
CVE-2025-27679
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Cross-Site Scripting (XSS) . The flaw resides in the Badge Registration feature (V-2023-005) due to the improper neutralization of input during web page generation. ...
CVE-2025-27652
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause lies in the rfIDEAS component (rfIDEAS V-2023-015). Exploitation of this vulnerability may allow an attacker to make u...
CVE-2025-27655
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause lies in the CPA v1 component (V-2023-009). This vulnerability allows an attacker to trigger the server to make una...
CVE-2025-27667
Vasion Print (formerly PrinterLogic), a SaaS-based application for managing and deploying printers, is vulnerable to Administrative User Email Enumeration in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The underlying cause is an Observable Discrepancy (CWE-203) t...
CVE-2025-27640
The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to SQL Injection (V-2024-012) in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . The vulnerability stems from improper neutralization of s...
CVE-2025-27646
Vasion Print (formerly PrinterLogic) is vulnerable to an Improper Access Control issue in versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 . This vulnerability allows for Edit User Account Exposure (V-2024-001), potentially leading to the disclosure of user account informat...
CVE-2025-27656
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Password Stored in Process List (V-2023-011). The root cause is that the process list stores passwords in plaintext , which could allow unauthorized disclosure of cre...
CVE-2025-27669
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Remote Network Scanning (XSPA) and Denial of Service (DoS) attacks. The root cause is identified as Uncontrolled Resource Consumption (CWE-400 ). An attacker could ex...
CVE-2025-27671
Vasion Print (formerly PrinterLogic) is vulnerable to Device Impersonation (CVE-2025-27671) due to a device emulation issue . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . Successful exploitation can lead to Authentication Bypass by Spoof...
CVE-2025-27673
Vasion Print (formerly PrinterLogic) is affected by a vulnerability where it allows a Cookie Returned in Response Body (OVE-20230524-0017). This issue impacts versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability is associated with CWE-539 , involving the...
CVE-2025-27666
The Vasion Print (formerly PrinterLogic) SaaS-based cloud-hosted application is vulnerable to Insufficient Authorization Checks in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This vulnerability, tracked as OVE-20230524-0010 , allows for unauthorized actions due t...
CVE-2025-27680
Vasion Print (formerly PrinterLogic) is vulnerable in versions prior to Virtual Appliance Host 1.0.750 Application 20.0.1442 . The flaw involves an insecure firmware image caused by insufficient verification of data authenticity (CWE-345). This vulnerability allows for the potential loading of un...
CVE-2025-27684
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to a security flaw where a debug bundle contains sensitive data (CWE-215). This vulnerability allows for the potential disclosure of sensitive information. While a proof-of-...
CVE-2025-27650
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to a secret disclosure issue. The root cause is the inclusion of private keys in the Docker overlay (V-2023-013), which could lead to the compromise of sensitive credent...
CVE-2025-27685
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 are vulnerable to a security flaw where a configuration file contains a CA and private key . This sensitive information is stored insecurely, potentially leading to unauthorized access or d...
CVE-2025-27647
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 are vulnerable to a security flaw that allows the addition of partial admin users without authentication . This vulnerability (identified as V-2024-002) stems from a missing authentication...
CVE-2025-27648
Vasion Print (formerly PrinterLogic) is affected by CVE-2025-27648 , a vulnerability involving Cross Tenant Password Exposure (V-2024-003). This issue impacts versions prior to Virtual Appliance Host 22.0.913 Application 20.0.2253 . The vulnerability stems from insufficiently protected credential...
CVE-2025-27664
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Insufficient CSRF Protection (OVE-20230524-0008). This vulnerability allows for unauthorized actions performed via a third-party website. To remediate this issue, use...
CVE-2025-27651
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause is identified as an issue within the Elatec component (Elatec V-2023-014). This vulnerability allows an attacker t...
CVE-2025-27661
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to a Session Fixation issue. This vulnerability allows an attacker to potentially hijack a user's session. To remediate this risk, users are recommended to update to Vir...
CVE-2025-27660
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Cross Site Scripting (XSS). This vulnerability allows an attacker to execute malicious scripts in a user's browser. To resolve this issue, it is recommended to update...
CVE-2025-27668
Vasion Print (formerly PrinterLogic) is affected by a vulnerability allowing Arbitrary Content Inclusion via Iframe (CVE-2025-27668). This issue exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The flaw is categorized as CWE-829 , involving the inclusion of ...