CVE-2016-1487

HIGH

Lexmark Markvision Enterprise <2.3.0 - Code Injection

Title source: llm

Description

Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization.

References (1)

Scores

CVSS v3 8.8
EPSS 0.0086
EPSS Percentile 74.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-502
Status published

Affected Products (1)

lexmark/markvision_enterprise < 2.3.0

Timeline

Published Mar 09, 2020
Tracked Since Feb 18, 2026