CVEvulnerability
CVE-2006-0827
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Affected configurations
• xerox workcentre 232
• xerox workcentre 238
• xerox workcentre 245
• xerox workcentre 255
• xerox workcentre 265
• xerox workcentre 275
References
- http://secunia.com/advisories/18952 Vendor Advisory
- http://www.securityfocus.com/bid/16727 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0668 www.vupen.com
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24806 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18952 Vendor Advisory
- http://www.securityfocus.com/bid/16727 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0668 www.vupen.com
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24806 exchange.xforce.ibmcloud.com