CVE-2019-19773

CVE-2019-19773 describes a stored cross-site scripting (XSS) vulnerability in the embedded web server of older Lexmark devices/printers. The issue arises from improper validation in web server handling of client data, leading to possible client-side code execution within affected interfaces. Mult...

CVE-2019-19772

CVE-2019-19772 affects Lexmark printers with an embedded web server that is vulnerable to reflected Cross-Site Scripting (XSS). Root cause: lack of proper validation of client-side data in the web application, enabling an attacker to inject and execute script in a user’s browser. Impact per sourc...

CVE-2019-10058

CVE-2019-10058 affects Lexmark printers; root cause is Incorrect Access Control due to lack of account lockout implemented on certain Lexmark devices. Documented across multiple sources (Threatpost/NVD) with references to Lexmark-specific advisories and NCC Group findings. Impact is described as ...

CVE-2020-10093

CVE-2020-10093 is a cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued Lexmark products. The underlying cause is insufficient validation of client-side data by the WEB application, enabling a malicious input to be reflected or executed in the context o...

CVE-2018-18894

CVE-2018-18894 affects older Lexmark devices (C, M, X, and 6500e) with firmware prior to 2018-12-18. The issue is a directory traversal vulnerability in the devices’ embedded web server, allowing path traversal to access files beyond intended scope. The available sources describe the vulnerabilit...

CVE-2020-10094

CVE-2020-10094 is a cross-site scripting (XSS) vulnerability in Lexmark printers. The affected line items include Lexmark CS31x, CS41x, CS51x, CX310, CX410, XC2130, CX510, XC2132, MS310/312/317, MS410, M1140, MS315/415/417, MS51x/610dn/617, M1145, M3150dn, MS610de, M3150, MS71x, M5163dn, and vari...