Xerox kayıtları
xerox üreticisine ait 121 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 22
- Düzeltme kaydı olan
- %0,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-20 Improper Input Validation3
- CWE-312 Cleartext Storage of Sensitive Information3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
121 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
45Planlayın | CVE-2025-8356İstismar yok | Path Traversal leading to RCExerox · freeflow core · CWE-22 | Kritik9,8 | — | %19,0 | 8 Ağu 2025 |
42Planlayın | CVE-2008-3571Kavram kanıtı | The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900.xerox · phaser · CWE-20 | Yüksek7,8 | — | %35,7 | 10 Ağu 2008 |
42Planlayın | CVE-2019-10880İstismar yok | Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "xerox · colorqube 8700 firmware · CWE-78 | Kritik9,8 | — | %8,4 | 12 Nis 2019 |
41Planlayın | CVE-2009-1656İstismar yok | Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7xerox · workcentre | Kritik10,0 | — | %3,5 | 16 May 2009 |
41Planlayın | CVE-2008-2824İstismar yok | Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackxerox · workcentre · CWE-264 | Kritik10,0 | — | %2,5 | 23 Haz 2008 |
40Planlayın | CVE-2018-20771İstismar yok | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC783xerox · workcentre 3655i firmware · CWE-20 | Kritik9,8 | — | %3,0 | 10 Şub 2019 |
40Planlayın | CVE-2019-13172İstismar yok | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie oxerox · phaser 3320 firmware · CWE-120 | Kritik9,8 | — | %3,0 | 13 Mar 2020 |
40Planlayın | CVE-2019-13165İstismar yok | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the Ixerox · phaser 3320 firmware · CWE-120 | Kritik9,8 | — | %2,8 | 13 Mar 2020 |
40Planlayın | CVE-2019-13171İstismar yok | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in thexerox · phaser 3320 firmware · CWE-787 | Kritik9,8 | — | %2,8 | 13 Mar 2020 |
40Planlayın | CVE-2019-13168İstismar yok | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of thxerox · phaser 3320 firmware · CWE-120 | Kritik9,8 | — | %2,8 | 13 Mar 2020 |
40Planlayın | CVE-2019-13169İstismar yok | Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Headexerox · phaser 3320 firmware · CWE-120 | Kritik9,8 | — | %2,6 | 13 Mar 2020 |
40Planlayın | CVE-2021-28671İstismar yok | Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.xerox · phaser 6510 firmware | Kritik9,8 | — | %2,6 | 29 Mar 2021 |
40Planlayın | CVE-2021-28672İstismar yok | Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.xerox · phaser 6510 firmware · CWE-120 | Kritik9,8 | — | %2,2 | 29 Mar 2021 |
40Planlayın | CVE-2016-11061İstismar yok | Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15xerox · workcentre 3655 firmware · CWE-78 | Kritik9,8 | — | %1,9 | 29 Nis 2020 |
40Planlayın | CVE-2018-17172İstismar yok | The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.0xerox · altalink c8030 firmware · CWE-77 | Kritik9,8 | — | %1,9 | 2 Oca 2019 |
40Planlayın | CVE-2021-28673İstismar yok | Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.xerox · phaser 6510 firmware | Kritik9,8 | — | %1,9 | 29 Mar 2021 |
40Planlayın | CVE-2006-6471İstismar yok | Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for xerox · workcentre | Kritik10,0 | — | %1,3 | 11 Ara 2006 |
40Planlayın | CVE-2006-6472İstismar yok | The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 coxerox · workcentre | Kritik10,0 | — | %1,3 | 11 Ara 2006 |
40Planlayın | CVE-2006-6470İstismar yok | The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returnsxerox · workcentre | Kritik10,0 | — | %1,3 | 11 Ara 2006 |
40Planlayın | CVE-2006-6473İstismar yok | Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x beforexerox · workcentre | Kritik10,0 | — | %1,2 | 11 Ara 2006 |
39İzleyin | CVE-2012-0773İstismar yok | The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player befoadobe · flash player · CWE-787 | Kritik9,3 | — | %5,4 | 28 Mar 2012 |
39İzleyin | CVE-2019-17184İstismar yok | Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attackerxerox · atlalink firmware | Kritik9,8 | — | %1,5 | 4 Eki 2019 |
39İzleyin | CVE-2021-37354İstismar yok | Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable.xerox · phaser 4622 firmware · CWE-787 | Kritik9,8 | — | %1,3 | 15 Şub 2022 |
39İzleyin | CVE-2018-20768İstismar yok | An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC783xerox · workcentre 3655i firmware · CWE-94 | Kritik9,8 | — | %1,2 | 10 Şub 2019 |
39İzleyin | CVE-2013-6362İstismar yok | Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.xerox · colorqube 9201 firmware · CWE-798 | Kritik9,8 | — | %1,1 | 13 Şub 2020 |
- CVE-2025-835645Planlayın
Path Traversal leading to RCE
KritikCVSS 9,8İstismar yokEPSS %19xerox · freeflow core8 Ağu 2025
- CVE-2008-357142Planlayın
The Xerox Phaser 8400 allows remote attackers to cause a denial of service (reboot) via an empty UDP packet to port 1900.
YüksekCVSS 7,8Kavram kanıtıEPSS %35xerox · phaser10 Ağu 2008
- CVE-2019-1088042Planlayın
Within multiple XEROX products a vulnerability allows remote command execution on the Linux system, as the "nobody" user through a crafted "
KritikCVSS 9,8İstismar yokEPSS %8xerox · colorqube 8700 firmware12 Nis 2019
- CVE-2009-165641Planlayın
Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7
KritikCVSS 10,0İstismar yokEPSS %3xerox · workcentre16 May 2009
- CVE-2008-282441Planlayın
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attack
KritikCVSS 10,0İstismar yokEPSS %2xerox · workcentre23 Haz 2008
- CVE-2018-2077140Planlayın
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC783
KritikCVSS 9,8İstismar yokEPSS %3xerox · workcentre 3655i firmware10 Şub 2019
- CVE-2019-1317240Planlayın
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Authentication Cookie o
KritikCVSS 9,8İstismar yokEPSS %3xerox · phaser 3320 firmware13 Mar 2020
- CVE-2019-1316540Planlayın
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the request parser of the I
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 3320 firmware13 Mar 2020
- CVE-2019-1317140Planlayın
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack-based buffer overflow vulnerabilities in the
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 3320 firmware13 Mar 2020
- CVE-2019-1316840Planlayın
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the attributes parser of th
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 3320 firmware13 Mar 2020
- CVE-2019-1316940Planlayın
Some Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow vulnerability in the Content-Type HTTP Heade
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 3320 firmware13 Mar 2020
- CVE-2021-2867140Planlayın
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 6510 firmware29 Mar 2021
- CVE-2021-2867240Planlayın
Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.
KritikCVSS 9,8İstismar yokEPSS %2xerox · phaser 6510 firmware29 Mar 2021
- CVE-2016-1106140Planlayın
Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15
KritikCVSS 9,8İstismar yokEPSS %1xerox · workcentre 3655 firmware29 Nis 2020
- CVE-2018-1717240Planlayın
The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.0
KritikCVSS 9,8İstismar yokEPSS %1xerox · altalink c8030 firmware2 Oca 2019
- CVE-2021-2867340Planlayın
Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.
KritikCVSS 9,8İstismar yokEPSS %1xerox · phaser 6510 firmware29 Mar 2021
- CVE-2006-647140Planlayın
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for
KritikCVSS 10,0İstismar yokEPSS %1xerox · workcentre11 Ara 2006
- CVE-2006-647240Planlayın
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 co
KritikCVSS 10,0İstismar yokEPSS %1xerox · workcentre11 Ara 2006
- CVE-2006-647040Planlayın
The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns
KritikCVSS 10,0İstismar yokEPSS %1xerox · workcentre11 Ara 2006
- CVE-2006-647340Planlayın
Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before
KritikCVSS 10,0İstismar yokEPSS %1xerox · workcentre11 Ara 2006
- CVE-2012-077339İzleyin
The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player befo
KritikCVSS 9,3İstismar yokEPSS %5adobe · flash player28 Mar 2012
- CVE-2019-1718439İzleyin
Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker
KritikCVSS 9,8İstismar yokEPSS %1xerox · atlalink firmware4 Eki 2019
- CVE-2021-3735439İzleyin
Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable.
KritikCVSS 9,8İstismar yokEPSS %1xerox · phaser 4622 firmware15 Şub 2022
- CVE-2018-2076839İzleyin
An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC783
KritikCVSS 9,8İstismar yokEPSS %1xerox · workcentre 3655i firmware10 Şub 2019
- CVE-2013-636239İzleyin
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
KritikCVSS 9,8İstismar yokEPSS %1xerox · colorqube 9201 firmware13 Şub 2020