CVE-2025-27640

The vulnerability classified as CWE-89 (SQL Injection) results from lack of proper validation or parameterization of input data passed to database queries. An attacker can send a crafted query containing a malicious SQL payload without authentication over the network. This allows manipulation of the logic of queries executed by the application against the database.

Attackers can gain unauthorized access to data stored in the database, modify or delete data, and in certain configurations lead to complete system takeover or unavailability.

Vasion Print must be updated to Virtual Appliance Host version 22.0.1002 or later and Application version 20.0.2614 or later. Detailed information is available in the vendor's security bulletin at: https://help.printerlogic.com/saas/Print/Security/Security-Bulletins.htm

Vasion Print (formerly PrinterLogic) in Virtual Appliance Host version below 22.0.1002 and Application version below 20.0.2614