Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: Vasion Print Application, Print Virtual Appliance Host 25.1.102, 25.1.1413 Clear all filters
TI-2025-24381 CVE-2025-34235 · GHSA-h65j-9j8p-pprc

Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE

Priority HIGH 76

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators,…

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00484 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-295
TI-2025-24366 CVE-2025-34220 · GHSA-j934-w62c-3233

Vasion Print (formerly PrinterLogic) Unauthenticated API Leaks Group Information

Priority HIGH 70

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identity/search-groups endpoint that does not…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0069 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-200
TI-2025-24374 CVE-2025-34228 · GHSA-h86g-gvx6-h94g

Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.php

Priority HIGH 77

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00782 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24375 CVE-2025-34229 · GHSA-j5gm-h223-jxq7

Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php

Priority HIGH 70

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reac…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00531 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24376 CVE-2025-34230 · GHSA-xj3j-28fv-mq6v

Vasion Print (formerly PrinterLogic) Blind SSRF via HP log_off_single_sign_on.php

Priority HIGH 70

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reac…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00531 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24377 CVE-2025-34231 · GHSA-wc5m-7wgp-f4f3

Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.php

Priority HIGH 77

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind server-side request forgery (SSRF) vuln…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00743 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24371 CVE-2025-34225 · GHSA-pfq8-m2q4-6wmh

Vasion Print (formerly PrinterLogic) SSRF via console_release Directory

Priority HIGH 77

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00812 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24379 CVE-2025-34233 · GHSA-m26j-rmr8-5cv6

Vasion Print (formerly PrinterLogic) Insecure Use of file_get_contents()

Priority HIGH 72

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanism failure vulnerability within the file_…

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00594 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-918
TI-2025-24380 CVE-2025-34234 · GHSA-4v4w-44q3-ww8w

Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys

Priority HIGH 79

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded private keys that are shipped in the applicatio…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0041 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-321
TI-2025-24378 CVE-2025-34232 · GHSA-h4fj-xhpc-c3pm

Vasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.php

Priority HIGH 70

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reac…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00551 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-306
TI-2025-24345 CVE-2025-34196 · GHSA-cg59-vwh5-x34m

Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password

Priority MEDIUM 49

Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate Auth…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00478 Published 2025-09-29 Fixed in 25.1.102, 25.1.1413 CWE-522