CVE-2017-9085: Kodak Insite

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the (1) "paramFile" parameter to /Site/Troubleshooting/DiagnosticReport.asp, or (2) "paramFile" parameter to /Site/Troubleshooting/SpeedTest.asp.

Affected products

• Kodak Insite: from 6.5, up to and including 8.0

Published 2017-11-14. Last modified 2026-06-17.