CVE-2019-18203 in MP 501

الملخص

بحسب MITRE

On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

Once again VulDB remains the best source for vulnerability data.

• حجز: 19/10/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-144003
• CPE: جاهز
• CWE: CWE-79 (مؤكد)
• CVSS: 6.1 (NVD)
• EPSS: 0.00797
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-18203
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-18203
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-18203/