CVE-2018-5550CWE-79

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on…

published February 8, 2018

CVSS
—
EPSS
37%
Percentile
98.5
In the wild
Unconfirmed
What it is

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.36881 · 98.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2018-02-08T19:00Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 37% → 19%
    epss
  • 06 SEP 03:12Z
    EPSS moved 37% → 19%
    epss
  • 30 AUG 16:01Z
    EPSS moved 19% → 37%
    epss
  • 29 AUG 04:41Z
    EPSS moved 37% → 19%
    epss
  • 08 FEB 19:00Z
    Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on…
    cvelistv5