Vulnerabilities (CVE)

Filtered by vendor Papercut Subscribe
Filtered by product Papercut Mf
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-39143 2 Microsoft, Papercut 3 Windows, Papercut Mf, Papercut Ng 2023-08-08 N/A 9.8 CRITICAL
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when external device integration is enabled (a very common configuration).
CVE-2019-12135 1 Papercut 2 Papercut Mf, Papercut Ng 2020-08-24 7.5 HIGH 9.8 CRITICAL
An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote attackers to execute arbitrary code via an unspecified vector.
CVE-2019-8948 1 Papercut 2 Papercut Mf, Papercut Ng 2019-02-21 7.5 HIGH 9.8 CRITICAL
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.