Approved changes feed: RSS · Atom

cpe:2.3:h:xerox:workcentre_275:*:*:pro:*:*:*:*:*

part: h version: * update: *

VendorXerox (d8e9b125-9300-56db-a245-db4fdb1eff41)
ProductWorkcentre 275 (a4d5eacf-dc25-5709-a41e-d3b699cfc2be)
Editionpro
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6441 vulnerable 2026-06-08 04:49:28.879259 Details available
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6440 vulnerable 2026-06-08 04:49:28.878728 Details available
Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues."
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6439 vulnerable 2026-06-08 04:49:28.878227 Details available
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain potentially sensitive information via unspecified vectors.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6438 vulnerable 2026-06-08 04:49:28.877733 Details available
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6436 vulnerable 2026-06-08 04:49:28.876771 Details available
Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages.
Published: 2006-12-10T11:00:00.000Z
Updated: 2024-08-07T20:26:46.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6434 vulnerable 2026-06-08 04:49:28.875886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6430 vulnerable 2026-06-08 04:49:28.874016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5290 vulnerable 2026-06-08 04:49:20.201419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0828 vulnerable 2026-06-08 04:48:55.452672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0827 vulnerable 2026-06-08 04:48:55.451932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0826 vulnerable 2026-06-08 04:48:55.451239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0825 vulnerable 2026-06-08 04:48:55.450387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.