CVE-2018-5550

2018-02-0819:00:00

CWE-79

rapid7

www.cve.org

EPSS

0.117

Percentile

95.3%

JSON

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

CNA Affected

[
  {
    "product": "Epson AirPrint",
    "vendor": "Epson",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/

epson.com/support/wa00860

EPSS

0.117

Percentile

95.3%

JSON

Related for CVELIST:CVE-2018-5550