← CVE Intelligence

CVE-2025-4044

XML External Entity Injection vulnerability in various Lexmark Universal Drivers PUBLISHED

Description (CNA)

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.

Affected (CNA)

Vendor / productVersions
Lexmark / Universal Print Driveraffected 0 before 3.0.6.0
Lexmark / Printer Software G2affected 0 before 2.17.0.0

CWE

CWE-611

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.