CVEvulnerability
CVE-2008-6436
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-03-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• xerox workcentre 7132
• xerox workcentre 7228
• xerox workcentre 7235
• xerox workcentre 7245
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/45627 osvdb.org
- http://secunia.com/advisories/30364 Vendor Advisory
- http://www.securityfocus.com/bid/29345 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1628/references Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42595 exchange.xforce.ibmcloud.com
- http://osvdb.org/45627 osvdb.org
- http://secunia.com/advisories/30364 Vendor Advisory
- http://www.securityfocus.com/bid/29345 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/1628/references Patch, Vendor Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX08_004.pdf Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42595 exchange.xforce.ibmcloud.com