Unscored severity · published Feb 21, 2006
CVE-2006-0827
Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Workcentre 232 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 238 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 245 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 255 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 265 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 275 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0827
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0827
Vendor Advisory
http://secunia.com/advisories/18952
www.securityfocus.com
http://www.securityfocus.com/bid/16727
www.vupen.com
http://www.vupen.com/english/advisories/2006/0668
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/24806
More from Workcentre 232
–
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy…
–
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows…
–
CVE-2006-6436
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before…
–
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image…
–
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain…