CVE-2019-11844 - An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter

Back Back to CVE browser

MEDIUM

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter

Published May 14, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 0.96%

Description

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://packetstormsecurity.com/files/152790/RICOH-SP-4520DN-Printer-HTML-Injection.html
x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3504
Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/152790/RICOH-SP-4520DN-Printer-HTML-Injection.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3504		Advisory