CVE-2021-28669

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights...

CVE-2019-19832

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2021-28668

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities...

CVE-2021-28669

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights...

CVE-2021-28668

Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities...

CVE-2021-28670

Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk...

Xerox AltaLink SQL Injection Vulnerability

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A SQL injection vulnerability exists in Xerox AltaLink B80xx, which affects the following products and versions: Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before...

PT-2021-17891

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B80xx versions prior to 103.008.020.23120 Xerox C8030/C8035 versions prior to 103.001.020.23120 Xerox C8045/C8055 versions prior to 103.002.020.23120 Xerox C8070 versions prior to 103.003.020.23120 Description: The issue is...

PT-2021-17892

Name of the Vulnerable Software and Affected Versions: Xerox AltaLink B80xx versions prior to 103.008.020.23120 Xerox C8030/C8035 versions prior to 103.001.020.23120 Xerox C8045/C8055 versions prior to 103.002.020.23120 Xerox C8070 versions prior to 103.003.020.23120 Description: The issue allows...

Xerox AltaLink security vulnerability

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a print-copy function. A security vulnerability exists in Xerox AltaLink that allows the ability to set configuration properties without requiring administrator privileges. The following products and versions a...

CVE-2019-18630: Cleartext Storage of Sensitive Information

On Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200, portions of the drive containing executable code were not encrypted thus leaving it open to potential cryptographic information disclosure...

PT-2021-9001

Name of the Vulnerable Software and Affected Versions Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 Description The issue allows a user with administrative privileges to turn off data encryptio...

PT-2021-9002

Name of the Vulnerable Software and Affected Versions Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 Description The issue allows an attacker to execute an unwanted binary during an exploited...

Xerox AltaLink security vulnerability

Xerox AltaLink is a hardware device from the American Xerox Xerox company. It provides a printing and copying function. A security vulnerability exists in Xerox AltaLink that allows a user with administrative privileges to disable data encryption on the device. The following products and versions...

CVE-2019-19832

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

Cross site request forgery (csrf)

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2019-19832

Xerox AltaLink C8035 printers allow CSRF. A request to add users is made in the Device User Database form field to the xerox.set URI. The frmUserName value must have a unique name...

CVE-2019-19832

CVE-2019-19832 affects Xerox AltaLink C8035 printers and is due to a Cross-Site Request Forgery (CSRF) flaw in the Web application. The vulnerability allows an attacker to trigger a request to add users via the xerox.set URI in the Device User Database form, requiring that the frmUserName value b...

PT-2019-15974

Name of the Vulnerable Software and Affected Versions Xerox AltaLink C8035 printers affected versions not specified Description The issue allows for Cross-Site Request Forgery CSRF attacks. It involves making a request to add users via the Device User Database form field to the "xerox.set" URI. T...

Xerox AltaLink C8035 Printer Cross-Site Request Forgery Vulnerability

The Xerox AltaLink C8035 is a multifunction printer from Xerox USA. A cross-site request forgery vulnerability exists in the Xerox AltaLink C8035. The vulnerability stems from the WEB application not adequately verifying that the request is from a trusted user. An attacker could use this...