CVE-2019-12135

published 2019-06-06

CVE-2019-12135: An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote…

Priority P3 55 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

An unspecified vulnerability in the application server in PaperCut MF and NG versions 18.3.8 and earlier and versions 19.0.3 and earlier allows remote attackers to execute arbitrary code via an unspecified vector.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
papercut	papercut_mf	<= 18.3.8	—
papercut	papercut_mf	19.0.1 – 19.0.3	—
papercut	papercut_ng	<= 18.3.8	—
papercut	papercut_ng	19.0.1 – 19.0.3	—

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.