« Volver al listado

CVE-2008-2743

Estado: ModificadaMedia (4.3)—

Cross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Xerox — Xerox 4110Xerox — Xerox 4590Xerox — Xerox 4595

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2743",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-06-17T15:41:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/30639",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/29690",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1020282",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1829/references",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43058",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30639",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/29690",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1020282",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1829/references",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.xerox.com/downloads/usa/en/c/cert_XRX08_007.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43058",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the embedded web server in Xerox 4110, 4590, and 4595 Copier/Printers allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en servidor web incluido en las impresoras/copiadoras Xerox 4110, 4590 y 4595, permite a atacantes remotos inyectar scripts web o HTML, a través de vectores de ataque desconocidos.\r\n"
    }
  ],
  "lastModified": "2026-06-16T22:54:20.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:xerox:xerox_4110:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3CDE01C-8944-4A4F-B8A9-821F80A31E99"
            },
            {
              "criteria": "cpe:2.3:h:xerox:xerox_4590:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "837C59EE-9ACE-4554-A6D0-8F7E4AFA3F9A"
            },
            {
              "criteria": "cpe:2.3:h:xerox:xerox_4595:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E7FEB3F-AE7E-401C-ACAB-A83818F7E3B1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}