First published: Thu Jul 10 2008(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Xerox CentreWare Web | <=3 | |
Xerox CentreWare Web | <=2.0 | |
Xerox CentreWare Web | <=1.0 | |
Xerox CentreWare Web | <=4.6.42 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-3121 is categorized as a medium severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2008-3121, you should upgrade to the latest version of Xerox CentreWare Web, specifically 4.6.46 or later.
CVE-2008-3121 affects users of Xerox CentreWare Web versions prior to 4.6.46, including versions 1.0 through 4.6.42.
CVE-2008-3121 can be exploited for cross-site scripting (XSS) attacks by allowing remote authenticated users to inject arbitrary web scripts or HTML.
Yes, exploitation of CVE-2008-3121 requires authentication, allowing only authenticated users to execute the XSS vulnerabilities.