Vulnerabilities > Ricoh > MP C406Zspf Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-09-26 CVE-2018-17309 Cross-site Scripting vulnerability in Ricoh MP C406Zspf Firmware
On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.
network
low complexity
ricoh CWE-79
6.1