6.8
CVE-2006-6436
- EPSS 0.83%
- Published 10.12.2006 11:28:00
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages.
Data is provided by the National Vulnerability Database (NVD)
Xerox ≫ Workcentre 232 Editionpro
Xerox ≫ Workcentre 238 Editionpro
Xerox ≫ Workcentre 245 Editionpro
Xerox ≫ Workcentre 255 Editionpro
Xerox ≫ Workcentre 265 Editionpro
Xerox ≫ Workcentre 275 Editionpro
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.83% | 0.738 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|