Security Advisory

CVE-2019-10880

9.8
CRITICAL

Vulnerability Description

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" request (OS Command Injection vulnerability in the HTTP interface). Depending upon configuration authentication may not be necessary.
Published Date April 12, 2019
Official Source NIST NVD Advisory