Unscored severity · published Aug 23, 2005
CVE-2005-2647
Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Document Centre 265 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 332 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 340 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 420 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 490 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 535 · Xerox
All versions, or not specified · source: NVD
DC
Document Centre 555 · Xerox
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2647
Patch
http://secunia.com/advisories/16467
securitytracker.com
http://securitytracker.com/id?1014720
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf
Patch
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_009.pdf
More from Document Centre 265
–
CVE-2005-2645
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass…
–
CVE-2005-2646
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a…
–
CVE-2005-1936
Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to…