Back to Database
Status published
Critical
CVE-2014-9375
Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision...
Vulnerability Description
Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-9375
Credits & Attribution
No credits recorded in the NVD database.
References
More from lexmark
View All →CVE-2022-29850
Various Lexmark products through 2022-04-27 allow an attacker who has...
High
8.1
CVE-2022-24935
Lexmark products through 2022-02-10 have Incorrect Access Control....
High
7.5
CVE-2021-44738
Buffer overflow vulnerability has been identified in Lexmark devices through...
Critical
9.8
CVE-2021-44737
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that...
High
8.8
CVE-2021-44736
The initial admin account setup wizard on Lexmark devices allow...
Critical
9.8
Affected Vendor
lexmark
View all reports →Affected Software
markvision enterprise
Vulnerable Versions:
Unknown
Timeline
Official Publish:
February 16th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.