Wepa Print Away

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wepa:wepa_print_away:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWepa (cb04fe7f-10f0-560f-aa7f-f13af43fe509)
ProductWepa Print Away (a8e92a17-aa1c-5ecc-9aba-cbe4c3088599)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42909 vulnerable 2026-06-08 05:49:30.736274 Details available
MEDIUM (6.5)
WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release codes. This could allow an attacker to generate print orders and release codes for documents they don´t own and print hem without authorization. In order to exploit this vulnerability, the user must have an account with wepanow.com or any of the institutions they serve, and be logged in.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T15:56:26.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42908 vulnerable 2026-06-08 05:49:30.735014 Details available
MEDIUM (6.3)
WEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames, allowing an attacker to deceive a user into uploading a document with a malicious filename, which will be included in subsequent HTTP responses, allowing a stored XSS to occur. This attack is persistent across victim sessions.
Published: 2023-02-03T00:00:00.000Z
Updated: 2025-03-26T15:55:55.790Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.