← Back

Xerox

xerox

119 CVEs • 299 products

Products (299)

Click to collapse
Toggle
Workcentre
workcentre
Freeflow Core
freeflow_core
Docutech 6110
docutech_6110
Docutech 6115
docutech_6115
Workcentre 65
workcentre_65
Workcentre 75
workcentre_75
Workcentre 90
workcentre_90

CVEs (119)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Xerox
6Workcentre 232
Workcentre 238Workcentre 245+3 more
Apr 16, 2026
Feb 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectivene...Show more
Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectiveness of security features" via unknown attack vectors.Show less
1Xerox
6Workcentre 232
Workcentre 238Workcentre 245+3 more
Apr 16, 2026
Feb 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arb...Show more
Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.Show less
1Xerox
6Workcentre 232
Workcentre 238Workcentre 245+3 more
Apr 16, 2026
Feb 21, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of s...Show more
Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of service via a crafted Postscript request.Show less
1Xerox
6Workcentre 232
Workcentre 238Workcentre 245+3 more
Apr 16, 2026
Feb 21, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass au...Show more
Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain "unauthorized network access" via unknown attack vectors.Show less
1Xerox
7Document Centre 265
Document Centre 332Document Centre 340+4 more
Apr 16, 2026
Aug 23, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTM...Show more
Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors.Show less
1Xerox
20Document Centre 220
Document Centre 230Document Centre 240+17 more
Apr 16, 2026
Aug 23, 2005
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown v...Show more
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.Show less
1Xerox
7Document Centre 265
Document Centre 332Document Centre 340+4 more
Apr 16, 2026
Aug 23, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.
1Xerox
3Workcentre 2128
Workcentre 2636Workcentre 3545
Apr 16, 2026
Jul 11, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web scrip...Show more
Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.Show less
1Xerox
3Workcentre 2128
Workcentre 2636Workcentre 3545
Apr 16, 2026
Jul 11, 2005
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted...Show more
Unknown vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to cause a denial of service or access files via crafted HTTP requests.Show less
1Xerox
3Workcentre 2128
Workcentre 2636Workcentre 3545
Apr 16, 2026
Jul 11, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.
1Xerox
20Document Centre 220
Document Centre 230Document Centre 240+17 more
Apr 16, 2026
Jun 13, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unknown vulnerability in the web server for the ESS/ Network Controller for Xerox Document Centre 240 through 555 running System Software 27.18.017 and earlier allows attackers to "gain unauthorized access."
1Xerox
19Workcentre
Workcentre 165Workcentre 175+16 more
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20....Show more
Unknown vulnerability in Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, related to SNMP authentication, allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-0703.Show less
1Xerox
18Workcentre 165
Workcentre 175Workcentre 2128+15 more
Apr 16, 2026
Mar 7, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.0...Show more
Xerox MicroServer Web Server for various WorkCentre products including M35/M45/M55 2.028.11.000 through 2.97.20.032 and 4.84.16.000 through 4.97.20.032, Pro 35/45/55 3.028.11.000 through 3.97.20.032, Pro 65/75/90 1.001.00.060 through 1.001.02.084, and others, has an "unauthenticated account," which allows remote attackers to modify system configuration, a different vulnerability than CVE-2005-1179.Show less
1Xerox
2Docutech 6110
Docutech 6115
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files.
1Xerox
2Docutech 6110
Docutech 6115
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the...Show more
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device.Show less
1Xerox
2Docutech 6110
Docutech 6115
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
6.4 MEDIUM· v2
The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the "print now" queue or (2) read the scanner job history.
1Xerox
2Docutech 6110
Docutech 6115
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) "service!" on Solaris 8.0 or (2) "administ" on Windows NT, which allows remote attackers to gain privileges.
1Xerox
1Docuprint N40
Apr 16, 2026
Aug 9, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm.
1Xerox
1Docucolor 4lp
Apr 16, 2026
Oct 13, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.