Unscored severity · published Dec 10, 2006
CVE-2006-6436
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Workcentre 232 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 238 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 245 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 255 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 265 · Xerox
All versions, or not specified · source: NVD
W2
Workcentre 275 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6436
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6436
Vendor Advisory
http://secunia.com/advisories/23265
www.xerox.com
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
More from Workcentre 232
–
CVE-2006-6441
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy…
–
CVE-2006-6434
Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows…
–
CVE-2006-6438
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image…
–
CVE-2006-6439
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain…
–
CVE-2006-6440
Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers…