Lexmark CNA: CVE Report Card & Published CVEs

A CVE record only requires a description to be published. “Completeness” measures how often Lexmark also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

100%

Overall score

Overall completeness100%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness100%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

202 chars

Avg description length

Per CVE record

2024-02-28

First CVE date

Earliest assignment

2026-02-03

Latest CVE date

Most recent assignment

8.0

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Frequently asked questions

Common questions about the Lexmark CNA.

What is the Lexmark CNA?

Lexmark is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 21 CVE records since 2024.

How many CVEs has Lexmark published?

Lexmark has published 21 CVE records, including 21 in the last two years.

What is Lexmark's CVE data quality grade?

RadicalNotion.AI grades Lexmark's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.

What products does Lexmark publish CVEs for?

Lexmark most frequently publishes CVEs for various, CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG, CX, XC, CS, MS, MX, XM, et. al., MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ, c950.

Which vendors does Lexmark cover?

Lexmark publishes CVEs across 2 distinct vendors, most often Lexmark, Lexmark International.

Is Lexmark actively publishing CVEs?

Lexmark is currently active, based on 21 CVEs in the last two years.

What is the average severity of Lexmark's CVEs?

The average CVSS base score across Lexmark's scored CVEs is 8.0.

How many critical CVEs has Lexmark published?

Lexmark has published 7 critical-severity CVEs and 9 high-severity CVEs.

Are any of Lexmark's CVEs in CISA's Known Exploited Vulnerabilities catalog?

No. None of Lexmark's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

What are the most common weakness types in Lexmark's CVEs?

Lexmark's CVEs most often map to these CWE weakness types: CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-122 (Heap-based Buffer Overflow), CWE-20 (Improper Input Validation).

How does Lexmark rank among CNAs?

By total CVE volume, Lexmark ranks #238 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

What these scores mean

Lexmark

Overview

Data quality report card

What these scores mean

Severity and exploitation

Common weakness types

Publishing activity by year

Top vendors

Top products

Latest CVEs

Other CNAs

Frequently asked questions

What is the Lexmark CNA?

How many CVEs has Lexmark published?

What is Lexmark's CVE data quality grade?

What products does Lexmark publish CVEs for?

Which vendors does Lexmark cover?

Is Lexmark actively publishing CVEs?

What is the average severity of Lexmark's CVEs?

How many critical CVEs has Lexmark published?

Are any of Lexmark's CVEs in CISA's Known Exploited Vulnerabilities catalog?

What are the most common weakness types in Lexmark's CVEs?

How does Lexmark rank among CNAs?

References

Track Lexmark CVEs