{"id":"CVE-2025-9269","state":"PUBLISHED","title":"Server-Side Request Forgery (SSRF) vulnerability found in embedded web server","description":"A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.","publishedAt":"2025-09-09T17:21:36.589Z","updatedAt":"2025-09-29T15:34:06.094Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","source":"Lexmark"},"assigner":"Lexmark","products":["Lexmark CX, XC, CS, MS, MX, XM, et. al."],"affected":[{"vendor":"Lexmark","product":"CX, XC, CS, MS, MX, XM, et. al.","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"CXTLS.250.199","changes":[{"at":"CXTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTLS.250.199","changes":[{"at":"MXTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTLS.250.199","changes":[{"at":"CSTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNSN.250.199","changes":[{"at":"MSNSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTSN.250.199","changes":[{"at":"MSTSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTSN.250.199","changes":[{"at":"MXTSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSNGV.250.199","changes":[{"at":"CSNGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTGV.250.199","changes":[{"at":"CSTGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTGV.250.199","changes":[{"at":"CXTGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTPC.250.199","changes":[{"at":"CXTPC.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTPC.250.199","changes":[{"at":"CSTPC.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTCT.250.199","changes":[{"at":"MXTCT.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTPM.250.199","changes":[{"at":"MXTPM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTMM.250.199","changes":[{"at":"CXTMM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTMM.250.199","changes":[{"at":"CSTMM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNGM.250.199","changes":[{"at":"MSNGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTGM.250.199","changes":[{"at":"MSTGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXNGM.250.199","changes":[{"at":"MXNGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTGM.250.199","changes":[{"at":"MXTGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNGW.250.199","changes":[{"at":"MSNGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTGW.250.199","changes":[{"at":"MSTGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTGW.250.199","changes":[{"at":"MXTGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTZJ.250.199","changes":[{"at":"CSTZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSNZJ.250.199","changes":[{"at":"CSNZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTZJ.250.199","changes":[{"at":"CXTZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXNZJ.250.199","changes":[{"at":"CXNZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSLSG.230.466","changes":[{"at":"MSLSG.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXLSG.230.466","changes":[{"at":"MXLSG.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSLBD.230.466","changes":[{"at":"MSLBD.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXLBD.230.466","changes":[{"at":"MXLBD.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSLBN.230.466","changes":[{"at":"CSLBN.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSLBL.230.466","changes":[{"at":"CSLBL.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXLBN.230.466","changes":[{"at":"CXLBN.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXLBL.230.466","changes":[{"at":"CXLBL.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTPP.230.466","changes":[{"at":"CXTPP.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTPP.230.466","changes":[{"at":"CSTPP.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTAT.230.466","changes":[{"at":"CSTAT.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTAT.230.466","changes":[{"at":"CXTAT.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTMH.230.466","changes":[{"at":"CSTMH.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTMH.230.466","changes":[{"at":"CXTMH.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.TL2.P224","changes":[{"at":"LW90.TL2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.PR2.P224","changes":[{"at":"LW90.PR2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.PR4.P224","changes":[{"at":"LW90.PR4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SB4.P224","changes":[{"at":"LW90.SB4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SB7.P224","changes":[{"at":"LW90.SB7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN2.P224","changes":[{"at":"LW90.DN2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN4.P224","changes":[{"at":"LW90.DN4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN7.P224","changes":[{"at":"LW90.DN7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.TU.P224","changes":[{"at":"LW90.TU.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SA.P224","changes":[{"at":"LW90.SA.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.MG.P224","changes":[{"at":"LW90.MG.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.GM7.P224","changes":[{"at":"LW90.GM7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.GM4.P224","changes":[{"at":"LW90.GM4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.VY4.P224","changes":[{"at":"LW90.VY4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.PRL.P260","changes":[{"at":"LW80.PRL.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.SB2.P260","changes":[{"at":"LW80.SB2.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.VYL.P260","changes":[{"at":"LW80.VYL.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.VY2.P260","changes":[{"at":"LW80.VY2.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.GM2.P260","changes":[{"at":"LW80.GM2.P261 and later","status":"unaffected"}],"versionType":"custom"}],"modules":["webserver"]}],"references":["https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"],"weaknesses":["CWE-918"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/9xxx/CVE-2025-9269.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-9269","state":"PUBLISHED","datePublished":"2025-09-09T17:21:36.589Z","dateUpdated":"2025-09-29T15:34:06.094Z","assignerShortName":"Lexmark","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","dateReserved":"2025-08-20T15:10:24.655Z"},"containers":{"cna":{"title":"Server-Side Request Forgery (SSRF) vulnerability found in embedded web server","descriptions":[{"lang":"en","value":"A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."}],"affected":[{"vendor":"Lexmark","product":"CX, XC, CS, MS, MX, XM, et. al.","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"CXTLS.250.199","changes":[{"at":"CXTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTLS.250.199","changes":[{"at":"MXTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTLS.250.199","changes":[{"at":"CSTLS.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNSN.250.199","changes":[{"at":"MSNSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTSN.250.199","changes":[{"at":"MSTSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTSN.250.199","changes":[{"at":"MXTSN.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSNGV.250.199","changes":[{"at":"CSNGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTGV.250.199","changes":[{"at":"CSTGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTGV.250.199","changes":[{"at":"CXTGV.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTPC.250.199","changes":[{"at":"CXTPC.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTPC.250.199","changes":[{"at":"CSTPC.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTCT.250.199","changes":[{"at":"MXTCT.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTPM.250.199","changes":[{"at":"MXTPM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTMM.250.199","changes":[{"at":"CXTMM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTMM.250.199","changes":[{"at":"CSTMM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNGM.250.199","changes":[{"at":"MSNGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTGM.250.199","changes":[{"at":"MSTGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXNGM.250.199","changes":[{"at":"MXNGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTGM.250.199","changes":[{"at":"MXTGM.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSNGW.250.199","changes":[{"at":"MSNGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSTGW.250.199","changes":[{"at":"MSTGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXTGW.250.199","changes":[{"at":"MXTGW.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTZJ.250.199","changes":[{"at":"CSTZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSNZJ.250.199","changes":[{"at":"CSNZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTZJ.250.199","changes":[{"at":"CXTZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXNZJ.250.199","changes":[{"at":"CXNZJ.250.200 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSLSG.230.466","changes":[{"at":"MSLSG.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXLSG.230.466","changes":[{"at":"MXLSG.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MSLBD.230.466","changes":[{"at":"MSLBD.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"MXLBD.230.466","changes":[{"at":"MXLBD.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSLBN.230.466","changes":[{"at":"CSLBN.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSLBL.230.466","changes":[{"at":"CSLBL.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXLBN.230.466","changes":[{"at":"CXLBN.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXLBL.230.466","changes":[{"at":"CXLBL.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTPP.230.466","changes":[{"at":"CXTPP.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTPP.230.466","changes":[{"at":"CSTPP.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTAT.230.466","changes":[{"at":"CSTAT.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTAT.230.466","changes":[{"at":"CXTAT.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CSTMH.230.466","changes":[{"at":"CSTMH.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"CXTMH.230.466","changes":[{"at":"CXTMH.230.467 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.TL2.P224","changes":[{"at":"LW90.TL2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.PR2.P224","changes":[{"at":"LW90.PR2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.PR4.P224","changes":[{"at":"LW90.PR4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SB4.P224","changes":[{"at":"LW90.SB4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SB7.P224","changes":[{"at":"LW90.SB7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN2.P224","changes":[{"at":"LW90.DN2.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN4.P224","changes":[{"at":"LW90.DN4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.DN7.P224","changes":[{"at":"LW90.DN7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.TU.P224","changes":[{"at":"LW90.TU.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.SA.P224","changes":[{"at":"LW90.SA.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.MG.P224","changes":[{"at":"LW90.MG.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.GM7.P224","changes":[{"at":"LW90.GM7.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.GM4.P224","changes":[{"at":"LW90.GM4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW90.VY4.P224","changes":[{"at":"LW90.VY4.P225 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.PRL.P260","changes":[{"at":"LW80.PRL.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.SB2.P260","changes":[{"at":"LW80.SB2.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.VYL.P260","changes":[{"at":"LW80.VYL.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.VY2.P260","changes":[{"at":"LW80.VY2.P261 and later","status":"unaffected"}],"versionType":"custom"},{"version":"0","status":"affected","lessThanOrEqual":"LW80.GM2.P260","changes":[{"at":"LW80.GM2.P261 and later","status":"unaffected"}],"versionType":"custom"}],"modules":["webserver"]}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":6.9,"baseSeverity":"MEDIUM","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","description":"CWE-918: Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Lexmark","orgId":"7bc73191-a2b6-4c63-9918-753964601853","dateUpdated":"2025-09-29T15:34:06.094Z"},"impacts":[{"capecId":"CAPEC-101","descriptions":[{"lang":"en","value":"CAPEC-101 Server Side Include (SSI) Injection"}]},{"capecId":"CAPEC-33","descriptions":[{"lang":"en","value":"CAPEC-33: HTTP Request Smuggling"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-09-09T17:43:57.556819Z","id":"CVE-2025-9269","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-09-09T18:36:21.085Z"}}]}}}