Xerox Xmpie Ustore vulnerabilities

2 CVEs affecting Xerox Xmpie Ustore, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23321, published 2022-02-10.

More from Xerox.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23320, published 2022-02-07. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into…
• CVE-2022-23321, published 2022-02-10. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.