Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

PaperCut Software Pty Ltd

First CVE: Apr 22, 2014Active for: 12 yearsTotal CVEs: 32
64.9
VTI Score
TOP TARGET

PaperCut Software develops print-management and document-control products deployed widely across educational institutions, enterprises, and managed-service-provider networks, where centralized print accounting and workflow automation create high-value targets. Despite a narrow product portfolio, the vendor is disproportionately represented in the vulnerability landscape, reflecting both the security-critical nature of print infrastructure and the long operational lifespans of many customer deployments. Vulnerabilities affecting PaperCut skew toward serious outcomes, with an elevated share reaching critical severity and a strong tendency to acquire public exploit code; the vendor's disclosures have also attracted confirmed in-the-wild exploitation and cataloging by CISA. The exposure concentrates in its flagship products such as PaperCut MF and PaperCut NG, with recurring weaknesses in web-application request forgery, cross-site scripting, and input-neutralization flaws that reflect the web-facing administrative and user-portal attack surface common to centralized print-management platforms. Defenders should prioritize patches for this vendor given the combination of serious severity, exploit availability, and the critical role print infrastructure plays in many organizations; current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
32
Total CVEs
More Total CVEs than 97% of tracked vendors
1.6
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 79% of tracked vendors
7.1
Avg CVSS Score
Higher Avg CVSS Score than 51% of tracked vendors
9.4%
In CISA KEV
Higher KEV Rate than 100% of tracked vendors

Trends Over Time

The number and severity of CVEs published that impact products developed by PaperCut Software Pty Ltd over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 22, 2014
12 years ago
Most Recent CVE
May 5, 2026
80 days ago

Self-Reporting Analysis

Of all the CVEs published by PaperCut Software Pty Ltd as a CNA, 85.0% affect products that PaperCut Software Pty Ltd develops as a vendor.

85.0%
15.0%
Self-reported: 17 (85.0%)
Third-party: 3 (15.0%)

Of all the CVEs published that affect products developed by PaperCut Software Pty Ltd, 53.1% are self-published by PaperCut Software Pty Ltd as a CNA.

53.1%
46.9%
Self-published: 17 (53.1%)
Other CNAs: 15 (46.9%)

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (32 CVEs).

32 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-27350CRITICAL
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vu
Apr 20, 20239.899YESYES
CVE-2023-27351HIGH
This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vu
Apr 20, 20237.595YESYES
CVE-2023-39143CRITICAL
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote code execution when e
Aug 4, 20239.884NOYES
CVE-2023-2533HIGH
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security se
Jun 20, 20238.880YESNO
CVE-2024-1222CRITICAL
This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small subset of PaperCut NG/M
Mar 14, 20249.865NONO
CVE-2023-3486HIGH
An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s fi
Jul 25, 20237.561NONO
CVE-2023-39469HIGH
PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations
May 3, 20247.251NONO
CVE-2024-1883MEDIUM
This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious URL that contains a s
Mar 14, 20246.149NONO
CVE-2024-1884MEDIUM
This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side application to make HTTP requ
Mar 14, 20246.534NONO
CVE-2019-8948CRITICAL
PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.
Feb 20, 20199.832NONO
View all 32 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products32 CVEs
41%
41%
16%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local5 (15.6%)
Network24 (75.0%)
Unknown3 (9.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (81.3%)
High3 (9.4%)
Unknown3 (9.4%)
User Interaction
None24 (75.0%)
Unknown3 (9.4%)
Required5 (15.6%)
Privileges Required
Low7 (21.9%)
High7 (21.9%)
None15 (46.9%)
Unknown3 (9.4%)

Exploit Exposure

Signals from CVEs in this vendor scope (32 CVEs).

CISA KEV
3 CVEs
9.4% of CVEs· 100th percentile
Metasploit
1 CVE
3.1% of CVEs· 98th percentile
Nuclei
4 CVEs
12.5% of CVEs· 97th percentile
ExploitDB
1 CVE
3.1% of CVEs· 75th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by PaperCut Software Pty Ltd.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by PaperCut Software Pty Ltd — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For PaperCut Software Pty Ltd's Products

View all 5 CNAs →

Top CWEs