CVE-2018-5550: Epson Airprint

Medium severity, CVSS 6.1. EPSS: 36.9% chance of exploitation in the next 30 days.

Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow untrusted users on the network to hijack a session cookie or perform other reflected XSS attacks on a currently logged-on user.

Affected products

• Epson Airprint: before 1-19-2018 (fixed in 1-19-2018)

Published 2018-02-08. Last modified 2026-06-17.