CVE-2014-8742

  • Last update: Apr 13, 2023

Description

Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified vectors.

Software From Fixed in
lexmark / markvision_enterprise - 2.1

Details

    • Severity: High
  • CVE: CVE-2014-8742
  • Published: Jan 27, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:C/I:N/A:N

CWEs

OWASP TOP 10