Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
amel's default incoming header filter, that allows an attacker to include Camel specific headers that for some Camel components can alter the behaviours such as the camel-bean component, to call another method on the bean, than was coded in the application. In the camel-jms component, then a malicious header can be used to send the message to another queue (on the same broker) than was coded in the application. This could also be seen by using the camel-exec component The attacker would need to inject custom headers, such as HTTP protocols. So if you have Camel applications that are directly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP
that are directly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP requests that are send to the Camel application. All the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box. In these conditions an attacker could be able to forge a Camel header name and make the bean component invoking other methods in the same bean. In terms of usage of the default header filter strategy the list of components using that is: * camel-activemq * camel-activemq6 * camel-amqp * camel-aws2-sqs * camel-azure-servicebus * camel-cxf-rest * camel-cxf-soap * c
-activemq * camel-activemq6 * camel-amqp * camel-aws2-sqs * camel-azure-servicebus * camel-cxf-rest * camel-cxf-soap * camel-http * camel-jetty * camel-jms * camel-kafka * camel-knative * camel-mail * camel-nats * camel-netty-http * camel-platform-http * camel-rest * camel-sjms * camel-spring-rabbitmq * camel-stomp * camel-tahu * camel-undertow * camel-xmpp The vulnerability arises due to a bug in the default filtering mechanism that only blocks headers starting with "Camel", "camel", or "org.apache.camel.". Mitigation: You can easily work around this in your Camel applications by removing the headers in your Camel routes. There are many ways of doing this, also globally or per route. This m
ions by removing the headers in your Camel routes. There are many ways of doing this, also globally or per route. This means you could use the removeHeaders EIP, to filter out anything like "cAmel, cAMEL" etc, or in general everything not starting with "Camel", "camel" or "org.apache.camel.". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/l3zcg3vts88bmc7w8172wkgw610y693z - https://issues.apache.org/jira/browse/CAMEL-21828 - https://camel.apache.org/security/CVE-2025-27636.html
CVE ID: CVE-2025-27637 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:38.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Cross-Site Scripting V-2024-016. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27638 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:39.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27639 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Privilege Escalation V-2024-015. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27640 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:37:43.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows SQL Injection V-2024-012. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27641 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:42.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27642 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:43.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27643 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:45.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27644 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:46.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Local Privilege Escalation V-2024-007. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27645 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:48.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Insecure Extension Installation by Trusting HTTP Permission Methods on the Server Side V-2024-005. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27646 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:49.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Edit User Account Exposure V-2024-001. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27647 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:50.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Addition of Partial Admin Users Without Authentication V-2024-002. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27648 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:52.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27649 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:53.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.893 Application 20.0.2140 allows Incorrect Access Control: PHP V-2023-016. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27650 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:54.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27651 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:56.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: Elatec V-2023-014. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27652 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:57.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: rfIDEAS V-2023-015. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27653 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:45:59.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Preauthenticated Cross Site Scripting (XSS): Badge Registration V-2023-012. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27654 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:00.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting (XSS) V-2023-017. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27655 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:02.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Server-Side Request Forgery: CPA v1 V-2023-009. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27656 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:03.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Password Stored in Process List V-2023-011. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27657 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:04.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Code Execution V-2023-008. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27658 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:25:03.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Authentication Bypass OVE-20230524-0001. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27659 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:22:12.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows SQL Injection OVE-20230524-0002. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27660 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:20:20.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross Site Scripting OVE-20230524-0003. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27661 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:18:25.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Session Fixation OVE-20230524-0004. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27662 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:16:18.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Password in URL OVE-20230524-0005. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27663 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:14:04.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27664 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:12:15.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient CSRF Protection OVE-20230524-0008. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27665 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:47:05.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-0009. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27666 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:58.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-20230524-0010. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27667 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:51.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Administrative User Email Enumeration OVE-20230524-0011. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27668 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:41.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27669 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:33.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Remote Network Scanning (XSPA)/DoS OVE-20230524-0013. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27670 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:25.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Signature Validation OVE-20230524-0014. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27671 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:18.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Device Impersonation OVE-20230524-0015. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27672 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T20:46:11.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27673 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-03-05T16:08:47.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm
CVE ID: CVE-2025-27674 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:06.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27675 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:07.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Vulnerable OpenID Implementation V-2023-004. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27676 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:09.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cross-Site Scripting in Reports V-2023-002. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html
CVE ID: CVE-2025-27677 State: PUBLISHED Published: 2025-03-05T00:00:00.000Z Last Updated: 2025-11-03T19:46:10.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm - https://pierrekim.github.io/blog/2025-04-08-vasion-printerlogic-83-vulnerabilities.html