Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-4568

30
FAUCET Score

CVE-2023-4568 is a medium-severity vulnerability affecting PaperCut NG versions 22.0.12 and below, allowing unauthenticated XMLRPC commands to be executed. This presents a network-based attack vector with low complexity, potentially leading to limited impact on confidentiality and integrity. While not actively exploited or on the KEV catalog, public Nuclei templates exist, and the vulnerability has a high EPSS score, indicating a significant probability of exploitation. Despite this, there is currently no community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 22.0.12CPE matchmatch criteria
cpe:2.3:a:papercut:papercut_ng:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
2.5
CvssVersion
3.1

Exploit Intelligence

EPSS Score
3.57%
Probability of exploitation in next 30 days
EPSS Percentile
88.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Nuclei: CVE-2023-4568 · Sep 18, 2023
This CVE's current EPSS score of 0.0357 is in the 84th percentile among its peer group of 23,723 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

jfrogvendor investigatingvia llm_extracted
lfedgevendor investigatingvia llm_extracted
linkacevendor investigatingvia llm_extracted
markusprojectvendor investigatingvia llm_extracted

Vendor Advisories (4)

jfrogllm-jfrog-5147dd273b00cddaMEDIUM

PaperCut NG Unauthenticated XMLRPC Functionality

Sep 13, 2023
lfedgellm-lfedge-c484198e624313e3MEDIUM

PaperCut NG Unauthenticated XMLRPC Functionality

Sep 13, 2023
markusprojectllm-markusproject-b5c49444c9993c27MEDIUM

PaperCut NG Unauthenticated XMLRPC Functionality

Sep 13, 2023
linkacellm-linkace-0fb303d873db3ce0MEDIUM

PaperCut NG Unauthenticated XMLRPC Functionality

Sep 13, 2023

References

tenable.com / security/research/tra-2023-31
ExploitThird Party Advisory