Vulnerabilities (CVE)

Filtered by vendor Printeron Subscribe
Filtered by product Printeron
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10327 1 Printeron 1 Printeron 2019-10-03 1.9 LOW 7.0 HIGH
PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users to obtain credentials for a domain user by reading the cps_config.xml file.
CVE-2018-17169 1 Printeron 1 Printeron 2019-04-30 4.0 MEDIUM 7.7 HIGH
An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.