xerox Vulnerability Advisory Catalog

Total 118 security vulnerabilities recorded for xerox software and firmware.

← Back to All Vendors
Component: colorqube_8580_firmware

Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript code....

📅 2019-05-13
CVSS 6.1 Dossier →
CVE-2019-10880 CRITICAL
Component: colorqube_8700_firmware

Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "HTTP" requ...

📅 2019-04-12
CVSS 9.8 Dossier →
CVE-2018-20771 CRITICAL
Component: workcentre_3655i_firmware

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7...

📅 2019-02-10
CVSS 9.8 Dossier →
CVE-2018-20770 CRITICAL
Component: workcentre_3655i_firmware

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7...

📅 2019-02-10
CVSS 9.8 Dossier →
Component: workcentre_3655i_firmware

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7...

📅 2019-02-10
CVSS 7.5 Dossier →
CVE-2018-20768 CRITICAL
Component: workcentre_3655i_firmware

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7...

📅 2019-02-10
CVSS 9.8 Dossier →
Component: workcentre_3655i_firmware

An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7...

📅 2019-02-10
CVSS 8.8 Dossier →
CVE-2018-17172 CRITICAL
Component: altalink_c8030_firmware

The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.05200, and ...

📅 2019-01-03
CVSS 9.8 Dossier →
CVE-2014-3138 UNKNOWN
Component: docushare

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allow...

📅 2014-05-02
CVSS 6.5 Dossier →
CVE-2013-0415 UNKNOWN
Component: freeflow_print_server

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors relat...

📅 2013-01-17
CVSS 6.0 Dossier →
CVE-2013-0407 UNKNOWN
Component: freeflow_print_server

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DTrace Frame...

📅 2013-01-17
CVSS 4.6 Dossier →
CVE-2012-0569 UNKNOWN
Component: freeflow_print_server

Unspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Install/smpa...

📅 2013-01-17
CVSS 3.3 Dossier →
CVE-2010-0549 UNKNOWN
Component: workcentre_6400_net_controller

Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Cont...

📅 2010-02-04
CVSS 5.0 Dossier →
CVE-2010-0548 UNKNOWN
Component: workcentre_5632

Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow r...

📅 2010-02-04
CVSS 5.0 Dossier →
CVE-2009-3913 UNKNOWN
Component: fiery_webtools

SQL injection vulnerability in summary.php in Xerox Fiery Webtools allows remote attackers to execute arbitrary SQL commands via the select parameter....

📅 2009-11-09
CVSS 7.5 Dossier →
CVE-2009-1656 UNKNOWN
Component: workcentre

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows...

📅 2009-05-16
CVSS 10.0 Dossier →
CVE-2008-6436 UNKNOWN
Component: workcentre

Cross-site scripting (XSS) vulnerability in the Web Server in Xerox WorkCentre 7132, 7228, 7235, and 7245 allows remote attackers to inject arbitrary ...

📅 2009-03-06
CVSS 4.3 Dossier →
CVE-2008-5225 UNKNOWN
Component: docushare

Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via...

📅 2008-11-25
CVSS 4.3 Dossier →
CVE-2008-3571 UNKNOWN
Component: phaser

The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900....

📅 2008-08-10
CVSS 7.8 Dossier →
CVE-2008-3122 UNKNOWN
Component: centreware_web

Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands ...

📅 2008-07-10
CVSS 6.5 Dossier →
CVE-2008-3121 UNKNOWN
Component: centreware_web

Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary w...

📅 2008-07-10
CVSS 4.3 Dossier →
CVE-2008-2825 UNKNOWN
Component: workcentre

Cross-site scripting (XSS) vulnerability in the embedded Web Server in Xerox WorkCentre M123, M128, and 133 and WorkCentre Pro 123, 128, and 133 allow...

📅 2008-06-23
CVSS 4.3 Dossier →
CVE-2008-2824 UNKNOWN
Component: workcentre

Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to mak...

📅 2008-06-23
CVSS 10.0 Dossier →
CVE-2008-2743 UNKNOWN
Component: xerox_4110

Cross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject ar...

📅 2008-06-17
CVSS 4.3 Dossier →
Page 3 of 5 (118 Total Records)