CVE-2019-18203 in MP 501

Riassunto

di MITRE

On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn and KeyDisplay parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 19/10/2019
• Moderazione: accettato
• Voce: VDB-144003
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.00797
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-18203
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-18203
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-18203/