CVE-2018-5550

State: Published
Severity: Not scored
Published: Feb 8, 2018
Updated: Aug 5, 2024
Reserved: Jan 12, 2018

Description

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

Affected Products

Product	Versions
Epson AirPrintEpson	n/aAffected

References

https://epson.com/support/wa00860
https://blog.rapid7.com/2018/02/08/r7-2017-28-epson-airprint-xss-cve-2018-5550/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.