Login Request a demo
OC
Product
Oce Colorwave 500 Firmware
by Canon · last CVE Mar 19, 2020
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Oce Colorwave 500 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10671
8.8
1%
Mar 19
The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections
Affected: through 4.0.0.0
CVE-2020-10669
7.5
4%
Mar 19
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp
Affected: 4.0.0.0
CVE-2020-10670
6.1
1%
Mar 19
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the parameter settingId of the settingDialogContent.jsp page
Affected: through 4.0.0.0
CVE-2020-10668
6.1
1%
Mar 19
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp
Affected: through 4.0.0.0
CVE-2020-10667
6.1
2%
Mar 19
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp
Affected: through 4.0.0.0
Showing 5