5
CVE-2006-0827
- EPSS 1.35%
- Veröffentlicht 21.02.2006 23:02:00
- Zuletzt bearbeitet 16.06.2026 22:21:22
- Erkennungen
LoginCross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xerox ≫ Workcentre 232 Edition pro
Xerox ≫ Workcentre 238 Edition pro
Xerox ≫ Workcentre 245 Edition pro
Xerox ≫ Workcentre 255 Edition pro
Xerox ≫ Workcentre 265 Edition pro
Xerox ≫ Workcentre 275 Edition pro
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.689 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://secunia.com/advisories/18952
http://www.vupen.com/english/advisories/2006/0668
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf
http://www.securityfocus.com/bid/16727
https://exchange.xforce.ibmcloud.com/vulnerabilities/24806