Unscored severity · published Jul 10, 2008
CVE-2008-3121
Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CW
Centreware Web · Xerox
through 1.0; through 2.0; through 3; through 4.6.42 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3121
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3121
Patch
http://secunia.com/advisories/30978
Patch
http://www.securityfocus.com/bid/30151
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_008.pdf
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/43671
More from Centreware Web
5.4
CVE-2026-1769
Stored XSS on Xerox CentreWare Web 7.0.6
–
CVE-2008-3122
Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors