What is CVE-2018-17167?

CVE-2018-17167 is a medium-severity vulnerability in Printeron, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-03-21.

How severe is CVE-2018-17167?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Printeron

CVE-2018-17167

PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name" or "Server Serial Number" field in the clustering configuration, (2) "name" field in the Edit Group configuration, (3) "Rule Name" field in the Access Control configuration, (4) "Service Name" in the Service Configuration, or (5) First Name or Last Name field in the Edit Account configuration.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Printeron — versions 4.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2018-17167?: CVE-2018-17167 is a medium-severity vulnerability in Printeron, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-03-21.
How severe is CVE-2018-17167?: Medium severity. CVSS v3 base score is 5.4 out of 10.