Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 be…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 25
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 25
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 35
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01083 · Published 2019-08-28 · No fix listed
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have an Integer Overflow.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2019-08-28 · No fix listed CWE-190
Priority LOW 29
Various Lexmark products have CSRF.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00407 · Published 2019-08-28 · No fix listed CWE-352
Priority LOW 26
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00871 · Published 2019-08-28 · No fix listed CWE-254
Priority MEDIUM 41
Various Lexmark products have Incorrect Access Control.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01091 · Published 2019-08-28 · No fix listed
Priority LOW 26
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00825 · Published 2019-08-28 · No fix listed CWE-306
Priority LOW 26
Various Lexmark products have Incorrect Access Control (issue 1 of 2).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00832 · Published 2019-08-28 · No fix listed CWE-306