xerox Vulnerability Advisory Catalog

Total 118 security vulnerabilities recorded for xerox software and firmware.

← Back to All Vendors
CVE-2021-28672 CRITICAL
Component: phaser_6510_firmware

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37....

📅 2021-03-29
CVSS 9.8 Dossier →
CVE-2021-28671 CRITICAL
Component: phaser_6510_firmware

Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37....

📅 2021-03-29
CVSS 9.8 Dossier →
CVE-2021-28673 CRITICAL
Component: phaser_6510_firmware

Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37....

📅 2021-03-29
CVSS 9.8 Dossier →
Component: altalink_b8045_firmware

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020...

📅 2021-03-29
CVSS 7.5 Dossier →
CVE-2021-28668 CRITICAL
Component: altalink_b8045_firmware

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020...

📅 2021-03-29
CVSS 9.8 Dossier →
CVE-2021-28670 CRITICAL
Component: altalink_b8045_firmware

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.0...

📅 2021-03-29
CVSS 9.1 Dossier →
Component: altalink_b8045_firmware

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.282...

📅 2021-03-04
CVSS 7.5 Dossier →
Component: altalink_b8045_firmware

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 ...

📅 2021-03-04
CVSS 8.1 Dossier →
Component: altalink_b8045_firmware

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 ...

📅 2021-03-04
CVSS 4.9 Dossier →
Component: workcentre_3655_firmware

An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XX...

📅 2021-01-26
CVSS 7.5 Dossier →
Component: workcentre_ec7836_firmware

Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description pages....

📅 2020-10-09
CVSS 6.1 Dossier →
CVE-2016-11061 CRITICAL
Component: workcentre_3655_firmware

Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not...

📅 2020-04-29
CVSS 9.8 Dossier →
CVE-2019-13172 CRITICAL
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie of the web ...

📅 2020-03-13
CVSS 9.8 Dossier →
CVE-2019-13171 CRITICAL
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the Google Cl...

📅 2020-03-13
CVSS 9.8 Dossier →
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to avoid CSRF attacks. Successful exploitation of this vu...

📅 2020-03-13
CVSS 6.5 Dossier →
CVE-2019-13169 CRITICAL
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Header of the w...

📅 2020-03-13
CVSS 9.8 Dossier →
CVE-2019-13168 CRITICAL
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of the IPP serv...

📅 2020-03-13
CVSS 9.8 Dossier →
Component: phaser_3320_firmware

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exp...

📅 2020-03-13
CVSS 6.1 Dossier →
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout. Local account credentials may be extracted from the de...

📅 2020-03-13
CVSS 7.5 Dossier →
CVE-2019-13165 CRITICAL
Component: phaser_3320_firmware

Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the IPP service...

📅 2020-03-13
CVSS 9.8 Dossier →
Component: workcentre_3655_firmware

Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP...

📅 2020-02-21
CVSS 8.8 Dossier →
CVE-2013-6362 CRITICAL
Component: colorqube_9201_firmware

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts....

📅 2020-02-13
CVSS 9.8 Dossier →
Component: altalink_c8035_firmware

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. (The frmUserName...

📅 2019-12-18
CVSS 8.8 Dossier →
CVE-2019-17184 CRITICAL
Component: atlalink_firmware

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain p...

📅 2019-10-04
CVSS 9.8 Dossier →
Page 2 of 5 (118 Total Records)