DeutschShown in its original language — a full translation is planned for a future version.
Vasion Print (Virtual Appliance Host und Application): Mehrere Schwachstellen
view advisory published 2025-09-29
Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um serverseitige Request-Forgery-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, beliebigen Code mit SYSTEM-Rechten auszuführen oder erweiterte Rechte zu erlangen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-34235US | high7.8 | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key… | ||||
| CVE-2025-34234US | high7.5OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded private… | ||||
| CVE-2025-34233US | medium6.8 | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanis… | ||||
| CVE-2025-34232US | medium5.3OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side r… | ||||
| CVE-2025-34231US | high8.6OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind… | ||||
| CVE-2025-34230US | medium5.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side r… | ||||
| CVE-2025-34229US | medium5.8OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side r… | ||||
| CVE-2025-34228US | high8.6OT elevated | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request… | ||||
| CVE-2025-3422US | medium6.3 | — | ||
The The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versi… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2025-09-29external
- GitHub Advisory Database vom 2025-09-29external
- GitHub Advisory Database vom 2025-09-29external
- NIST Vulnerability Database vom 2025-09-29external
- NIST Vulnerability Database vom 2025-09-29external
- NIST Vulnerability Database vom 2025-09-29external
- NIST Vulnerability Database vom 2025-09-29external
- NIST Vulnerability Database vom 2025-09-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan