CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 7.5
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: an issue was discovered on xerox workcentre 3655, 3655i, 58xx, 58xxi, 59xx, 59xxi, 6655, 6655i, 72xx, 72xxi, 78xx, 78xxi, 7970, 7970i, ec7836, and ec7856 devices before r18-05 073.xxx.0487.15000. there is blind sql injection.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-02-10
Last Modified Date: 2019-02-13