Xerox Centreware Web vulnerabilities

3 CVEs affecting Xerox Centreware Web, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1769, published 2026-02-06.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-3121, published 2008-07-10. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2008-3122, published 2008-07-10. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple SQL injection vulnerabilities in Xerox CentreWare Web (CWW) before 4.6.46 allow remote authenticated users to execute arbitrary SQL commands via the unspecified vectors.
• CVE-2026-1769, published 2026-02-06. Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Xerox CentreWare on Windows allows Stored XSS.This issue affects CentreWare: through…