mpxj records
4 published records for vendor mpxj.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-611 Improper Restriction of XML External Entity Reference1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-25020No exploit | MPXJ through 8.1.3 allows XXE attacks.mpxj · mpxj · CWE-611 | Critical9.8 | — | 2.5% | Aug 29, 2020 |
22Monitor | CVE-2020-35460Proof of concept | common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writinmpxj · mpxj · CWE-22 | Medium5.3 | — | 1.8% | Dec 14, 2020 |
21Monitor | CVE-2024-49771No exploit | MPXJ has a Potential Path Traversal Vulnerabilityjoniles · mpxj · CWE-22 | Medium5.3 | — | 0.4% | Oct 28, 2024 |
13Monitor | CVE-2022-41954No exploit | Temporary File Information Disclosure Vulnerabilitympxj · mpxj · CWE-200 | Low3.3 | — | 0.2% | Nov 25, 2022 |
- CVE-2020-2502040Plan
MPXJ through 8.1.3 allows XXE attacks.
CriticalCVSS 9.8No exploitEPSS 2%mpxj · mpxjAug 29, 2020
- CVE-2020-3546022Monitor
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writin
MediumCVSS 5.3Proof of conceptEPSS 1%mpxj · mpxjDec 14, 2020
- CVE-2024-4977121Monitor
MPXJ has a Potential Path Traversal Vulnerability
MediumCVSS 5.3No exploitEPSS 0%joniles · mpxjOct 28, 2024
- CVE-2022-4195413Monitor
Temporary File Information Disclosure Vulnerability
LowCVSS 3.3No exploitEPSS 0%mpxj · mpxjNov 25, 2022