Unscored severity · published Apr 22, 2014
CVE-2014-2659
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the admin UI in Papercut MF and NG before 14.1 (Build 26983) allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
PaperCut MF/NG · PaperCut
through 14.1; 12.0; 12.1; 12.2; 12.3; 12.4; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2659
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2659
Vendor Advisory
http://secunia.com/advisories/58037
www.papercut-mf.com
http://www.papercut-mf.com/release-history/
www.papercut.com
http://www.papercut.com/release-history/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92648
More from PaperCut MF/NG
9.8
CVE-2026-81578
PaperCut MF/NG: Authentication Bypass
9.8
CVE-2023-27350
PaperCut MF/NG Improper Access Control Vulnerability
9.1
CVE-2026-82078
PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
8.8
CVE-2023-2533
PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
7.5
CVE-2023-27351
PaperCut NG/MF Improper Authentication Vulnerability