GCVE - cpe:2.3:o:xerox:workcentre_5900_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:xerox:workcentre_5900_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Xerox (`d8e9b125-9300-56db-a245-db4fdb1eff41`)
Product	Workcentre 5900 Firmware (`939d2f67-003d-52f7-a5d8-62c9371504dc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-20771`	vulnerable	2026-06-08 05:11:27.898821	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is unauthenticated Remote Command Execution. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-16T20:17:09.382Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20770`	vulnerable	2026-06-08 05:11:27.895984	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is Blind SQL Injection. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-16T23:01:16.483Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20769`	vulnerable	2026-06-08 05:11:27.893377	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is a Local File Inclusion vulnerability. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-17T01:56:14.884Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20768`	vulnerable	2026-06-08 05:11:27.890261	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. An attacker can execute PHP code by leveraging a writable file. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-17T03:03:48.700Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20767`	vulnerable	2026-06-08 05:11:27.864993	Details available An issue was discovered on Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, 7970i, EC7836, and EC7856 devices before R18-05 073.xxx.0487.15000. There is authenticated remote command execution. Published: 2019-02-10T17:00:00.000Z Updated: 2024-09-17T03:22:29.571Z Open on db.gcve.eu Reference links https://securitydocs.business.xerox.com/wp-content/uploads/2018/07/cert_Security_Mini_Bulletin_XRX18Y_for_ConnectKey_EC78xx_v1.0.pdf	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.