CVE-2020-10667: Improper Neutralization of Input During Web Page Generation

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...

PT-2020-12273

Name of the Vulnerable Software and Affected Versions Canon Oce Colorwave 500 version 4.0.0.0 Description The web application exposed by the Canon Oce Colorwave 500 printer is vulnerable to Stored XSS in the "TemplateManager/indexExternalLocation.jsp" API endpoint. The vulnerable parameter is...