Skip to content
OpenAdvisories

Vendor

Vasion

43 known vulnerabilities.

Vasion at a glance

Last 12 months
0
Critical · all time
20
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202521
Sep 20254119
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Print Virtual Appliance Host 43 Print Application 42 Print Application (SaaS/VA) 1 Print 0

Latest advisories

  • High max 9.4
    WID-SEC-2025-2208 2 CVEs

    Vasion Print: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um Passwörter offenzulegen und dadurch Administratorrechte zu erlangen.

    Vasion Linux
  • High max 9.5
    WID-SEC-2025-2156 9 CVEs rev. 2

    Vasion Print (Virtual Appliance Host und Application): Mehrere Schwachstellen

    Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um serverseitige Request-Forgery-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, beliebigen Code mit SYSTEM-Rechten a…

    Vasion Windows
    first Sep 29, 2025
  • High max 10.0
    WID-SEC-2025-2162 14 CVEs

    Vasion Print: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um sich erhöhte Berechtigungen – sogar Administratorrechte – zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informatione…

    Vasion Windows
  • High max 9.3
    WID-SEC-2025-2103 18 CVEs

    Vasion Print: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Vasion Print ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, einen Denial of Service zu verursachen oder seine Rechte zu erweitern.

    Vasion Linux Windows
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Critical 9.4
    CVE-2025-34210

    Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store a large number of sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) in cleartext files that are wo…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.2
    CVE-2025-34208

    Vasion Print (formerly PrinterLogic) Insecure Password Hashing

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) store user passwords using unsalted SHA-512 hashes with a fall-back to unsalted SHA-1. The hashing is performed via PHP's `hash()` function in multiple files (se…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34217

    Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'N…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.5
    CVE-2025-34235

    Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators, causing the client to skip SSL/TLS cert…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34221

    Vasion Print (formerly PrinterLogic)

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to t…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.4
    CVE-2025-34215

    Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated firmware-upload flow: a public page returns a signed token usable at va-api/v1/up…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34224

    Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the `console_release` directory without requiring authentication. An unau…

    Vasion Print Virtual Appliance Host Print Application
  • Medium 6.9
    CVE-2025-34220

    Vasion Print (formerly PrinterLogic) Unauthenticated API Leaks Group Information

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contains a /api-gateway/identity/search-groups endpoint that does not require authentication. Requests to ht…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34222

    Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /admin/hp/cert_upload, /admin/hp/cert_delete, /admin/certs/ca, and /admin/certs/…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.8
    CVE-2025-34228

    Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.php

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `/var/www/app/console_release/lexmark/update…

    Vasion Print Virtual Appliance Host Print Application
  • Medium 6.9
    CVE-2025-34229

    Vasion Print (formerly PrinterLogic) Blind SSRF via HP installApp.php

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_rele…

    Vasion Print Virtual Appliance Host Print Application
  • Medium 6.9
    CVE-2025-34230

    Vasion Print (formerly PrinterLogic) Blind SSRF via HP log_off_single_sign_on.php

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_rele…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.8
    CVE-2025-34231

    Vasion Print (formerly PrinterLogic) SSRF via HP badgeSetup.php

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind and non-blind server-side request forgery (SSRF) vulnerability. The '/var/www/app/console_re…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.8
    CVE-2025-34225

    Vasion Print (formerly PrinterLogic) SSRF via console_release Directory

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a server-side request forgery (SSRF) vulnerability. The `console_release` directory is reachable fro…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34216

    Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.5
    CVE-2025-34233

    Vasion Print (formerly PrinterLogic) Insecure Use of file_get_contents()

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a protection mechanism failure vulnerability within the file_get_contents() function. When an admini…

    Vasion Print Virtual Appliance Host Print Application
  • High 7.9
    CVE-2025-34207

    Vasion Print (formerly PrinterLogic) Insecure SSH Client Configuration

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 (VA and SaaS deployments) configure the SSH client within Docker instances with the following options: `UserKnownHostsFile=/dev/null`, `StrictHos…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34223

    Vasion Print (formerly PrinterLogic) Insecure Installation Credentials

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) contain a default admin account and an installation‑time endpoint at `/admin/query/update_database.php` tha…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.7
    CVE-2025-34212

    Vasion Print (formerly PrinterLogic) Insecure Build Pipeline

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.843 and Application prior to version 20.0.1923 (VA/SaaS deployments) possess CI/CD weaknesses: the build pulls an unverified third-party image, downloads the VirtualBox Extensio…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-34211

    Vasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA and SaaS deployments) contain a private SSL key and matching public certificate stored in cleartext. The key belongs to the h…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.4
    CVE-2025-34209

    Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 (VA and SaaS deployments) contain Docker images with the private GPG key and passphrase for the account *no‑reply+virtual‑appliance@printerlogic.c…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.2
    CVE-2025-34234

    Vasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain two hardcoded private keys that are shipped in the application containers (printerlogic/pi, printerl…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 10.0
    CVE-2025-34218

    Vasion Print (formerly PrinterLogic) Exposed Internal Docker Instance

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose internal Docker containers through the gw Docker instance. The gateway publishes a /meta endpoint wh…

    Vasion Print Virtual Appliance Host Print Application
  • Medium 6.9
    CVE-2025-34232

    Vasion Print (formerly PrinterLogic) Blind SSRF via Lexmark dellCheck.php

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (VA/SaaS deployments) contain a blind server-side request forgery (SSRF) vulnerability reachable via the /var/www/app/console_rele…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-34196

    Vasion Print (formerly PrinterLogic) Hardcoded PrinterLogic CA Private Key and Hardcoded Password

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 (Windows client deployments) contain a hardcoded private key for the PrinterLogic Certificate Authority (CA) and a hardcoded password in …

    Vasion Print Virtual Appliance Host Print Application
  • High 8.5
    CVE-2025-34191

    Vasion Print (formerly PrinterLogic) Arbitrary File Write as Root via Response Path Symlink Follow

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (macOS/Linux client deployments) contain an arbitrary file write vulnerability via the response file handling. When tasks produce output …

    Vasion Print Virtual Appliance Host Print Application
  • High 8.5
    CVE-2025-34190

    Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD Hooking

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (macOS/Linux client deployments) are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requir…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-34205

    Vasion Print (formerly PrinterLogic) Dangerous PHP Dead Code Enables RCE

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (VA and SaaS deployments) contains dangerous PHP dead code present in multiple Docker-hosted PHP instances. A script named /var/www/app/r…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.7
    CVE-2025-34202

    Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able t…

    Vasion Print Virtual Appliance Host Print Application
  • Medium 6.9
    CVE-2025-34189

    Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application versions prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local inter-process communication (IPC) mechanism. The software s…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-34206

    Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) mount host configuration and secret material under /var/www/efs_storage into many Docker containers with overly-permissive filesystem permissions. Files such…

    Vasion Print Virtual Appliance Host Print Application (SaaS/VA)
  • Critical 9.3
    CVE-2025-34199

    Vasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 (VA and SaaS deployments) contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communi…

    Vasion Print Virtual Appliance Host Print Application
  • High 7.1
    CVE-2025-34193

    Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 include Windows client components (PrinterInstallerClientInterface.exe, PrinterInstallerClient.exe, PrinterInstallerClientLaunch…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.5
    CVE-2025-34201

    Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) run many Docker containers on shared internal networks without firewalling or segmentation between instances. A compromise of any single container allows dir…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.4
    CVE-2025-34188

    Vasion Print (formerly PrinterLogic) Local Log Disclosure of Cleartext Sessions

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 (macOS/Linux client deployments) contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSI…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.5
    CVE-2025-34194

    Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 (Windows client deployments) contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components.…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.6
    CVE-2025-34200

    Vasion Print (formerly PrinterLogic) Network Account Password Stored in Cleartext

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with loc…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.7
    CVE-2025-34204

    Vasion Print (formerly PrinterLogic) Processes Running as Root Inside Docker Instances

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA and SaaS deployments) contains multiple Docker containers that run primary application processes (for example PHP workers, Node.js servers and custom binaries) as the root user. T…

    Vasion Print Virtual Appliance Host Print Application
  • Critical 9.3
    CVE-2025-34198

    Vasion Print (formerly PrinterLogic) Shared / Hardcoded SSH Host Private Keys in Appliance Image

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951 and Application prior to 20.0.2368 (VA and SaaS deployments) contain shared, hardcoded SSH host private keys in the appliance image. The same private host keys (RSA, ECDSA,…

    Vasion Print Virtual Appliance Host Print Application
  • High 8.6
    CVE-2025-34197

    Vasion Print (formerly PrinterLogic) Undocumented Local Account with Hardcoded Password and Passwordless sudo

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.951, Application prior to 20.0.2368 (VA and SaaS deployments) contain an undocumented local user account named ubuntu with a preset password and a sudoers entry granting that a…

    Vasion Print Virtual Appliance Host Print Application