Security Advisory

CVE-2020-10667

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-19 18:07:48
Last updated 2024-08-04 11:06:10
Assigner mitre
State PUBLISHED

Description

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is map(template_name). NOTE: this is fixed in the latest version.