50 matches found
CVE-2025-27637
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are vulnerable to Cross-Site Scripting (XSS) . The vulnerability, identified as V-2024-016, arises from the improper neutralization of input during web page generation. An attacker ex...
CVE-2025-27641
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.951 and Application 20.0.2368 are affected by a vulnerability that allows unauthenticated access to APIs for Single-Sign On (V-2024-009). The root cause is an unauthenticated API interface within the cloud-hosted a...
CVE-2025-27643
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to the disclosure of a hardcoded AWS API key (identified as V-2024-006). This security flaw allows for the potential exposure of cloud infrastructure credentials. To remedia...
CVE-2025-27676
Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) in the Reports V-2023-002 component. This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . An attacker could exploit this vulnerability to execute malicious scripts in the c...
CVE-2025-27672
Vasion Print (formerly PrinterLogic ) is vulnerable to an OAUTH Security Bypass (OVE-20230524-0016) in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The vulnerability allows for improper authentication within the SaaS-based, cloud-hosted application used for managing a...
CVE-2025-27674
Vasion Print (formerly PrinterLogic) is vulnerable to Hardcoded IdP Key V-2023-006 in versions prior to Virtual Appliance Host 22.0.843 Application 20.0.1923 . The vulnerability stems from the presence of hardcoded Identity Provider (IdP) keys within the application. Evidence of exploitation exis...
CVE-2025-27639
Vasion Print (formerly PrinterLogic ) is vulnerable to a Privilege Escalation flaw (V-2024-015) in versions prior to Virtual Appliance Host 22.0.1002 Application 20.0.2614 . This vulnerability allows for an elevation of privilege within the cloud-hosted application used for managing and deploying...
CVE-2025-27642
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to an authentication bypass that allows unauthenticated driver package editing . This issue is identified as V-2024-008 . To remediate this vulnerability, users should updat...
CVE-2025-27663
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Weak Password Encryption / Encoding (OVE-20230524-0007). The root cause is insufficient password encryption strength within the SaaS-based, cloud-hosted application u...
CVE-2025-27649
Vasion Print (formerly PrinterLogic) is vulnerable to Incorrect Access Control (PHP V-2023-016) in versions prior to Virtual Appliance Host 22.0.893 and Application 20.0.2140 . The security flaw stems from improper PHP access control mechanisms within the SaaS-based, cloud-hosted printer manageme...
CVE-2025-27644
Vasion Print (formerly PrinterLogic ) is vulnerable to Local Privilege Escalation in versions prior to Virtual Appliance Host 22.0.933 and Application 20.0.2368 . The vulnerability allows a local attacker to gain elevated privileges on the system. To remediate this issue, users are recommended to...
CVE-2025-27670
Vasion Print (formerly PrinterLogic), a SaaS-based cloud-hosted application for managing and deploying printers, is affected by a security vulnerability involving insufficient signature verification . This flaw exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 ...
CVE-2025-27678
Vasion Print (formerly PrinterLogic) is affected by a Client Remote Code Execution vulnerability in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The flaw allows for the execution of arbitrary code on the client side. While the technical root cause is not detailed ...
CVE-2025-27653
Vasion Print (formerly PrinterLogic ) is vulnerable to a preauthenticated Cross-Site Scripting (XSS) attack in its badge registration feature. This issue affects versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . The vulnerability is caused by the improper neutralizatio...
CVE-2025-27662
The Vasion Print (formerly PrinterLogic ) application is vulnerable to the exposure of plaintext passwords in the URL. This issue affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability is categorized as OVE-20230524-0005. No specific exploit detail...
CVE-2025-27683
Vasion Print (formerly PrinterLogic ) is vulnerable to a Driver Unrestricted Upload of File with Dangerous Type (V-2022-006) in versions prior to Virtual Appliance Host 1.0.735 Application 20.0.1330 . The root cause is the application's failure to properly restrict the upload of dangerous driver ...
CVE-2025-27638
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 are affected by a hardcoded password vulnerability (V-2024-013). This flaw allows for unauthorized access due to the presence of static credentials within the software. To mitigate th...
CVE-2025-27657
Vasion Print (formerly PrinterLogic ) is vulnerable to Remote Code Execution (RCE) in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability is associated with the identifier V-2023-008 . While the specific root cause is not detailed in the provided docume...
CVE-2025-27658
Vasion Print (formerly PrinterLogic ) is affected by an Authentication Bypass vulnerability (OVE-20230524-0001) in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This flaw allows an attacker to bypass authentication mechanisms to gain unauthorized access. While tech...
CVE-2025-27659
Vasion Print (formerly PrinterLogic) is vulnerable to SQL Injection in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . An attacker exploiting this vulnerability could perform an SQL injection attack against the SaaS-based, cloud-hosted application. No specific exploi...
CVE-2021-42631
PrinterLogic Web Stack (PrinterLogic, Inc.) is affected by CVE-2021-42631: versions 19.1.1.13 SP9 and earlier deserializes attacker-controlled input, enabling pre-auth remote code execution. Root cause is a deserialization flaw in the web stack that can be triggered without authentication, leadin...
CVE-2025-27645
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 are vulnerable to insecure extension installation. This issue arises because the server-side trust of HTTP permission methods allows for unauthorized extension installations. To remediate ...
CVE-2025-27665
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are susceptible to a vulnerability involving insufficient antivirus protection . This security flaw could allow drivers to contain known malicious code, specifically identified as OVE-...
CVE-2025-27675
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are susceptible to a vulnerability caused by a flawed OpenID implementation (V-2023-004 ). This flaw can lead to the exposure of sensitive information to unauthorized actors. While sp...
CVE-2025-27681
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 and Application 20.0.1330 are affected by a vulnerability where the software mishandles Client Inter-process Security V-2022-004 . The issue stems from improper client-side inter-process security handling within...
CVE-2025-27677
Vasion Print (formerly PrinterLogic ) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to a flaw allowing Symbolic Links For Unprivileged File Interaction (V-2022-002). The root cause involves a symbolic link that could lead to unauthorized file interacti...
CVE-2025-27679
Vasion Print (formerly PrinterLogic ) is vulnerable to Cross-Site Scripting (XSS) in its Badge Registration feature (V-2023-005). This security flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . A proof-of-concept exploit has been published and observed in ...
CVE-2025-27654
Vasion Print (formerly PrinterLogic) is affected by a Cross-Site Scripting (XSS) vulnerability, identified as V-2023-017 . The flaw exists in versions running on Virtual Appliance Host before 22.0.862 and Application before 20.0.2014 . An attacker could exploit this vulnerability to execute malic...
CVE-2025-27682
Vasion Print (formerly PrinterLogic) is affected by CVE-2025-27682 , which involves Insecure Log Permissions (V-2022-005). This vulnerability impacts versions prior to Virtual Appliance Host 1.0.735 and Application 20.0.1330 . The issue stems from an insecure logging permission configuration with...
CVE-2025-27652
Vasion Print (formerly PrinterLogic) is affected by a Server-Side Request Forgery (SSRF) vulnerability in the rfIDEAS component. This flaw exists in versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . The vulnerability allows an attacker to trigger the server to make uni...
CVE-2025-27655
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw originates in the CPA v1 component. This vulnerability allows an attacker to trigger the server to make unintended req...
CVE-2025-27640
Vasion Print (formerly PrinterLogic ), a SaaS-based cloud-hosted application for managing and deploying printers, is vulnerable to SQL Injection in versions prior to Virtual Appliance Host 22.0.1002 and Application 20.0.2614 . The root cause is the improper neutralization of special elements used...
CVE-2025-27646
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.913 and Application 20.0.2253 are vulnerable to Edit User Account Exposure V-2024-001 . This security flaw results from a risk of user account information disclosure . While specific exploitation details and direct...
CVE-2025-27656
Vasion Print (formerly PrinterLogic ) is vulnerable to a security flaw where passwords are stored in plaintext within the process list. This issue affects versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . The root cause is a process list configuration that exposes sens...
CVE-2025-27667
The Vasion Print (formerly PrinterLogic) SaaS-based application is vulnerable to Administrative User Email Enumeration in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . This vulnerability allows an attacker to enumerate administrative user emails, which could facili...
CVE-2025-27669
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are susceptible to a vulnerability that allows for Remote Network Scanning (XSPA) and Denial of Service (DoS) attacks. The documents do not provide specific technical details regarding...
CVE-2025-27671
Vasion Print (formerly PrinterLogic) is vulnerable to Device Impersonation (OVE-20230524-0015) due to a device emulation issue . This vulnerability affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . While the impact is categorized as total in security metrics, s...
CVE-2025-27673
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to an issue where a cookie is returned in the response body (OVE-20230524-0017). The provided documents do not specify the technical root cause, the specific security im...
CVE-2025-27666
The Vasion Print (formerly PrinterLogic) SaaS-based cloud-hosted application is vulnerable to insufficient authorization checks (OVE-20230524-0010). This flaw affects versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . While the vulnerability stems from inadequate author...
CVE-2025-27650
Vasion Print (formerly PrinterLogic ), a SaaS-based cloud-hosted application for managing and deploying printers, is affected by CVE-2025-27650. The vulnerability exists in versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 . The root cause is the inclusion of private key...
CVE-2025-27680
Vasion Print (formerly PrinterLogic) is vulnerable to an Insecure Firmware Image flaw (V-2024-004 ) due to insufficient verification of data authenticity . This security issue affects versions prior to Virtual Appliance Host 1.0.750 and Application 20.0.1442 . The vulnerability stems from the app...
CVE-2025-27684
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 and Application 20.0.1330 are affected by a vulnerability where a debug bundle contains sensitive data (V-2022-003). This exposure could potentially allow for the disclosure of sensitive information. A proof-of-...
CVE-2025-27685
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 1.0.735 and Application 20.0.1330 are vulnerable to a security flaw where a configuration file contains a CA and private key (V-2022-001). This flaw can lead to the cleartext storage of sensitive information . While the...
CVE-2025-27647
Vasion Print (formerly PrinterLogic) is affected by an authentication bypass vulnerability in versions prior to Virtual Appliance Host 22.0.913 and Application 20.0.2253 . The flaw allows for the unauthenticated addition of partial administrator users . No specific exploit code or remediation det...
CVE-2025-27648
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.913 and Application 20.0.2253 are vulnerable to Cross Tenant Password Exposure (V-2024-003). This vulnerability allows for the unauthorized disclosure of passwords across different tenants within the SaaS-based, cl...
CVE-2025-27664
Vasion Print (formerly PrinterLogic) is vulnerable to Insufficient CSRF Protection (OVE-20230524-0008) in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The vulnerability allows for Cross-Site Request Forgery attacks. Exploitation details or specific exploit links a...
CVE-2025-27651
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.862 and Application 20.0.2014 are vulnerable to a Server-Side Request Forgery (SSRF) . The security flaw originates within the Elatec component, as identified in Elatec V-2023-014. This vulnerability allows an atta...
CVE-2025-27661
Vasion Print (formerly PrinterLogic), a SaaS-based cloud-hosted application for managing and deploying printers, is affected by a Session Fixation vulnerability. The issue exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . No specific exploit details or remedi...
CVE-2025-27668
Vasion Print (formerly PrinterLogic) versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 are vulnerable to Arbitrary Content Inclusion via Iframe. This vulnerability, identified as OVE-20230524-0012 , stems from the application's ability to allow the inclusion of content f...
CVE-2025-27660
The Vasion Print (formerly PrinterLogic) SaaS-based, cloud-hosted application for managing and deploying printers is vulnerable to a Cross-Site Scripting (XSS) attack. The flaw exists in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . An attacker could exploit this v...