Xerox Colorqube 8580 Firmware vulnerabilities

2 CVEs affecting Xerox Colorqube 8580 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-26572, published 2022-04-04.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26572, published 2022-04-04. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information.
• CVE-2018-15530, published 2019-05-13. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site scripting (XSS) in the web interface of the Xerox ColorQube 8580 allows remote persistent injection of custom HTML / JavaScript code.