CVE-2026-1769-WriteUp

CVE-2026-1769 — Xerox CentreWare Web의 저장형 XSS CVE-2026-1769 에 대한 공개 타임라인 및 기술 분석 문서로, 제가 발견하여 Xerox에 책임 있게 공개한 저장형 크로스 사이트 스크립팅 취약점입니다. CVE 레코드: cve.org/CVERecord?id=CVE-2026-1769 벤더 보안 공지: XRX26-003 CWE: CWE-79 — 웹 페이지 생성 중 입력의 부적절한 중화 CVSS 3.1: 5.3 Medium — AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769

Xerox CentreWare Web on Windows is affected by a Stored XSS in CentreWare Web versions through 7.0.6. The vulnerability arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and potentially executed in the context of other users’ sessions...

CVE-2026-1769 Stored XSS on Xerox CentreWare Web 7.0.6

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

CVE-2026-1769 Stored XSS on Xerox CentreWare Web 7.0.6

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

EUVD-2026-5635

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

Xerox CentreWare 安全漏洞

Xerox CentreWare is a network management software developed by the American company Xerox. Versions of Xerox CentreWare 7.0.6 and earlier contained security vulnerabilities, which were caused by improper input handling. These vulnerabilities could lead to stored-xss attacks...

PT-2026-6753

Name of the Vulnerable Software and Affected Versions Xerox CentreWare versions through 7.0.6 Description A flaw exists in Xerox CentreWare on Windows that allows for Stored Cross-site Scripting XSS. This issue involves improper neutralization of input during web page generation. The vulnerabilit...

CVE-2026-1769: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through 7.0.6. Consider upgrading Xerox® CentreWare Web® to v7.2.2.25 via the software available on Xerox.com...

EUVD-2008-3112

Malware in sbrugna...

EUVD-2008-3111

Malware in sbrugna...

Xerox CentreWare Web < 4.6.46 Multiple Vulnerabilities (XRX08-008)

Xerox CentreWare Web, a web-based tool for IP printer management, is installed on the remote web server. According to its banner, the installed version of Xerox CentreWare Web reportedly contains three areas that are prone to SQL injection attacks, provided the attacker has valid credentials, and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors...

CVE-2008-3122

Multiple SQL injection vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors...

CVE-2008-3121

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3121

Multiple cross-site scripting XSS vulnerabilities in Xerox CentreWare Web CWW before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3121

Xerox CentreWare Web (CWW) vulnerable to multiple cross-site scripting (XSS) flaws in versions prior to 4.6.46. Remote authenticated users can inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity; no explicit exploitation details are provided. Remediation: upgrade to ...