Details of VAR-202004-0107

ID

VAR-202004-0107

CVE

CVE-2020-10094

TITLE

plural Lexmark Cross-site scripting vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2020-004893

DESCRIPTION

A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273; MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273; MS810de, M5155, M5163 before LW74.DN4.P273; MS812de, M5170 before LW74.DN7.P273; MS91x before LW74.SA.P273; MX31x, XM1135 before LW74.SB2.P273; MX410, MX510 & MX511 before LW74.SB4.P273; XM1140, XM1145 before LW74.SB4.P273; MX610 & MX611 before LW74.SB7.P273; XM3150 before LW74.SB7.P273; MX71x, MX81x before LW74.TU.P273; XM51xx & XM71xx before LW74.TU.P273; MX91x & XM91x before LW74.MG.P273; MX6500e before LW74.JD.P273; C746 before LHS60.CM2.P738; C748, CS748 before LHS60.CM4.P738; C792, CS796 before LHS60.HC.P738; C925 before LHS60.HV.P738; C950 before LHS60.TP.P738; X548 & XS548 before LHS60.VK.P738; X74x & XS748 before LHS60.NY.P738; X792 & XS79x before LHS60.MR.P738; X925 & XS925 before LHS60.HK.P738; X95x & XS95x before LHS60.TQ.P738; 6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier; C736 LR.SKE.P824 and earlier; E46x LR.LBH.P824 and earlier; T65x LR.JP.P824 and earlier; X46x LR.BS.P824 and earlier; X65x LR.MN.P824 and earlier; X73x LR.FL.P824 and earlier; W850 LP.JB.P823 and earlier; and X86x LP.SP.P823 and earlier. plural Lexmark The product contains a cross-site scripting vulnerability.Information may be obtained and tampered with

Trust: 1.71

sources: NVD: CVE-2020-10094 // JVNDB: JVNDB-2020-004893 // VULMON: CVE-2020-10094

AFFECTED PRODUCTS

vendor:	lexmark	model:	mx71x	scope:	lte	version:	lw74.tu.p272	Trust: 1.0
vendor:	lexmark	model:	mx6500e	scope:	lte	version:	lw74.jd.p272	Trust: 1.0
vendor:	lexmark	model:	mx611	scope:	lte	version:	lw74.sb7.p272	Trust: 1.0
vendor:	lexmark	model:	c736	scope:	lte	version:	lr.ske.p824	Trust: 1.0
vendor:	lexmark	model:	ms317	scope:	lte	version:	lw74.prl.p272	Trust: 1.0
vendor:	lexmark	model:	ms818	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	ms310	scope:	lte	version:	lw74.prl.p272	Trust: 1.0
vendor:	lexmark	model:	m3150dn	scope:	lte	version:	lw74.pr2.p272	Trust: 1.0
vendor:	lexmark	model:	cs748	scope:	lte	version:	lhs60.cm4.p737	Trust: 1.0
vendor:	lexmark	model:	c950	scope:	lte	version:	lhs60.tp.p737	Trust: 1.0
vendor:	lexmark	model:	ms417	scope:	lte	version:	lw74.tl2.p272	Trust: 1.0
vendor:	lexmark	model:	xm51xx	scope:	lte	version:	lw74.tu.p272	Trust: 1.0
vendor:	lexmark	model:	m1145	scope:	lte	version:	lw74.pr2.p272	Trust: 1.0
vendor:	lexmark	model:	w850	scope:	lte	version:	lp.jb.p823	Trust: 1.0
vendor:	lexmark	model:	e46x	scope:	lte	version:	lr.lbh.p824	Trust: 1.0
vendor:	lexmark	model:	xs79x	scope:	lte	version:	lhs60.mr.p737	Trust: 1.0
vendor:	lexmark	model:	ms610dn	scope:	lte	version:	lw74.pr2.p272	Trust: 1.0
vendor:	lexmark	model:	mx511	scope:	lte	version:	lw74.sb4.p272	Trust: 1.0
vendor:	lexmark	model:	mx31x	scope:	lte	version:	lw74.sb2.p272	Trust: 1.0
vendor:	lexmark	model:	cs796	scope:	lte	version:	lhs60.hc.p737	Trust: 1.0
vendor:	lexmark	model:	ms410	scope:	lte	version:	lw74.prl.p272	Trust: 1.0
vendor:	lexmark	model:	t65x	scope:	lte	version:	lr.jp.p824	Trust: 1.0
vendor:	lexmark	model:	m5163dn	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	mx91x	scope:	lte	version:	lw74.mg.p272	Trust: 1.0
vendor:	lexmark	model:	m5155	scope:	lte	version:	lw74.dn4.p272	Trust: 1.0
vendor:	lexmark	model:	xm3150	scope:	lte	version:	lw74.sb7.p272	Trust: 1.0
vendor:	lexmark	model:	xc2132	scope:	lte	version:	lw74.gm7.p272	Trust: 1.0
vendor:	lexmark	model:	x95x	scope:	lte	version:	lhs60.tq.p737	Trust: 1.0
vendor:	lexmark	model:	cs41x	scope:	lte	version:	lw74.vy2.p272	Trust: 1.0
vendor:	lexmark	model:	ms810de	scope:	lte	version:	lw74.dn4.p272	Trust: 1.0
vendor:	lexmark	model:	ms810	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	cx410	scope:	lte	version:	lw74.gm4.p272	Trust: 1.0
vendor:	lexmark	model:	x548	scope:	lte	version:	lhs60.vk.p737	Trust: 1.0
vendor:	lexmark	model:	xm1140	scope:	lte	version:	lw74.sb4.p272	Trust: 1.0
vendor:	lexmark	model:	c746	scope:	lte	version:	lhs60.cm2.p737	Trust: 1.0
vendor:	lexmark	model:	xs95x	scope:	lte	version:	lhs60.tq.p737	Trust: 1.0
vendor:	lexmark	model:	m5163	scope:	lte	version:	lw74.dn4.p272	Trust: 1.0
vendor:	lexmark	model:	x46x	scope:	lte	version:	lr.bs.p824	Trust: 1.0
vendor:	lexmark	model:	6500e	scope:	lte	version:	lhs60.jr.p737	Trust: 1.0
vendor:	lexmark	model:	x925	scope:	lte	version:	lhs60.hk.p737	Trust: 1.0
vendor:	lexmark	model:	xc2130	scope:	lte	version:	lw74.gm4.p272	Trust: 1.0
vendor:	lexmark	model:	mx510	scope:	lte	version:	lw74.sb4.p272	Trust: 1.0
vendor:	lexmark	model:	xm71xx	scope:	lte	version:	lw74.tu.p272	Trust: 1.0
vendor:	lexmark	model:	ms812de	scope:	lte	version:	lw74.dn7.p272	Trust: 1.0
vendor:	lexmark	model:	ms415	scope:	lte	version:	lw74.tl2.p272	Trust: 1.0
vendor:	lexmark	model:	ms91x	scope:	lte	version:	lw74.sa.p272	Trust: 1.0
vendor:	lexmark	model:	xm1145	scope:	lte	version:	lw74.sb4.p272	Trust: 1.0
vendor:	lexmark	model:	ms315	scope:	lte	version:	lw74.tl2.p272	Trust: 1.0
vendor:	lexmark	model:	ms617	scope:	lte	version:	lw74.pr2.p272	Trust: 1.0
vendor:	lexmark	model:	ms71x	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	m1140	scope:	lte	version:	lw74.prl.p272	Trust: 1.0
vendor:	lexmark	model:	xs548	scope:	lte	version:	lhs60.vk.p737	Trust: 1.0
vendor:	lexmark	model:	c792	scope:	lte	version:	lhs60.hc.p737	Trust: 1.0
vendor:	lexmark	model:	mx610	scope:	lte	version:	lw74.sb7.p272	Trust: 1.0
vendor:	lexmark	model:	x74x	scope:	lte	version:	lhs60.ny.p737	Trust: 1.0
vendor:	lexmark	model:	xm91x	scope:	lte	version:	lw74.mg.p272	Trust: 1.0
vendor:	lexmark	model:	ms312	scope:	lte	version:	lw74.prl.p272	Trust: 1.0
vendor:	lexmark	model:	ms610de	scope:	lte	version:	lw74.pr4.p272	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	lte	version:	lw74.vyl.p272	Trust: 1.0
vendor:	lexmark	model:	m3150	scope:	lte	version:	lw74.pr4.p272	Trust: 1.0
vendor:	lexmark	model:	ms812	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	mx81x	scope:	lte	version:	lw74.tu.p272	Trust: 1.0
vendor:	lexmark	model:	x86x	scope:	lte	version:	lp.sp.p823	Trust: 1.0
vendor:	lexmark	model:	mx410	scope:	lte	version:	lw74.sb4.p272	Trust: 1.0
vendor:	lexmark	model:	x65x	scope:	lte	version:	lr.mn.p824	Trust: 1.0
vendor:	lexmark	model:	m5170	scope:	lte	version:	lw74.dn7.p272	Trust: 1.0
vendor:	lexmark	model:	xs925	scope:	lte	version:	lhs60.hk.p737	Trust: 1.0
vendor:	lexmark	model:	c734	scope:	lte	version:	lr.sk.p824	Trust: 1.0
vendor:	lexmark	model:	x73x	scope:	lte	version:	lr.fl.p824	Trust: 1.0
vendor:	lexmark	model:	xm1135	scope:	lte	version:	lw74.sb2.p272	Trust: 1.0
vendor:	lexmark	model:	x792	scope:	lte	version:	lhs60.mr.p737	Trust: 1.0
vendor:	lexmark	model:	c925	scope:	lte	version:	lhs60.hv.p737	Trust: 1.0
vendor:	lexmark	model:	ms811	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	cx310	scope:	lte	version:	lw74.gm2.p272	Trust: 1.0
vendor:	lexmark	model:	xs748	scope:	lte	version:	lhs60.ny.p737	Trust: 1.0
vendor:	lexmark	model:	cs51x	scope:	lte	version:	lw74.vy4.p272	Trust: 1.0
vendor:	lexmark	model:	c748	scope:	lte	version:	lhs60.cm4.p737	Trust: 1.0
vendor:	lexmark	model:	cx510	scope:	lte	version:	lw74.gm7.p272	Trust: 1.0
vendor:	lexmark	model:	ms51x	scope:	lte	version:	lw74.pr2.p272	Trust: 1.0
vendor:	lexmark	model:	ms817	scope:	lte	version:	lw74.dn2.p272	Trust: 1.0
vendor:	lexmark	model:	cs31x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs41x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cs51x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	cx410	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms310	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	ms312	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	mx51x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	mx61x	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	xc2130	scope:	-	version:	-	Trust: 0.8
vendor:	lexmark	model:	6500e	scope:	eq	version:	lhs60.jr.p737	Trust: 0.1
vendor:	lexmark	model:	c734	scope:	eq	version:	lr.sk.p824	Trust: 0.1
vendor:	lexmark	model:	c736	scope:	eq	version:	lr.ske.p824	Trust: 0.1
vendor:	lexmark	model:	c746	scope:	eq	version:	lhs60.cm2.p737	Trust: 0.1
vendor:	lexmark	model:	c748	scope:	eq	version:	lhs60.cm4.p737	Trust: 0.1
vendor:	lexmark	model:	c792	scope:	eq	version:	lhs60.hc.p737	Trust: 0.1
vendor:	lexmark	model:	c925	scope:	eq	version:	lhs60.hv.p737	Trust: 0.1
vendor:	lexmark	model:	c950	scope:	eq	version:	lhs60.tp.p737	Trust: 0.1
vendor:	lexmark	model:	cs31x	scope:	eq	version:	lw74.vyl.p272	Trust: 0.1
vendor:	lexmark	model:	cs41x	scope:	eq	version:	lw74.vy2.p272	Trust: 0.1
vendor:	lexmark	model:	cs51x	scope:	eq	version:	lw74.vy4.p272	Trust: 0.1
vendor:	lexmark	model:	cs748	scope:	eq	version:	lhs60.cm4.p737	Trust: 0.1
vendor:	lexmark	model:	cs796	scope:	eq	version:	lhs60.hc.p737	Trust: 0.1
vendor:	lexmark	model:	cx310	scope:	eq	version:	lw74.gm2.p272	Trust: 0.1
vendor:	lexmark	model:	cx410	scope:	eq	version:	lw74.gm4.p272	Trust: 0.1
vendor:	lexmark	model:	cx510	scope:	eq	version:	lw74.gm7.p272	Trust: 0.1
vendor:	lexmark	model:	e46x	scope:	eq	version:	lr.lbh.p824	Trust: 0.1
vendor:	lexmark	model:	m1140	scope:	eq	version:	lw74.prl.p272	Trust: 0.1
vendor:	lexmark	model:	m1145	scope:	eq	version:	lw74.pr2.p272	Trust: 0.1
vendor:	lexmark	model:	m3150	scope:	eq	version:	lw74.pr4.p272	Trust: 0.1
vendor:	lexmark	model:	m3150dn	scope:	eq	version:	lw74.pr2.p272	Trust: 0.1
vendor:	lexmark	model:	m5155	scope:	eq	version:	lw74.dn4.p272	Trust: 0.1
vendor:	lexmark	model:	m5163	scope:	eq	version:	lw74.dn4.p272	Trust: 0.1
vendor:	lexmark	model:	m5163dn	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	m5170	scope:	eq	version:	lw74.dn7.p272	Trust: 0.1
vendor:	lexmark	model:	ms310	scope:	eq	version:	lw74.prl.p272	Trust: 0.1
vendor:	lexmark	model:	ms312	scope:	eq	version:	lw74.prl.p272	Trust: 0.1
vendor:	lexmark	model:	ms315	scope:	eq	version:	lw74.tl2.p272	Trust: 0.1
vendor:	lexmark	model:	ms317	scope:	eq	version:	lw74.prl.p272	Trust: 0.1
vendor:	lexmark	model:	ms410	scope:	eq	version:	lw74.prl.p272	Trust: 0.1
vendor:	lexmark	model:	ms415	scope:	eq	version:	lw74.tl2.p272	Trust: 0.1
vendor:	lexmark	model:	ms417	scope:	eq	version:	lw74.tl2.p272	Trust: 0.1
vendor:	lexmark	model:	ms51x	scope:	eq	version:	lw74.pr2.p272	Trust: 0.1
vendor:	lexmark	model:	ms610de	scope:	eq	version:	lw74.pr4.p272	Trust: 0.1
vendor:	lexmark	model:	ms610dn	scope:	eq	version:	lw74.pr2.p272	Trust: 0.1
vendor:	lexmark	model:	ms617	scope:	eq	version:	lw74.pr2.p272	Trust: 0.1
vendor:	lexmark	model:	ms71x	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms810	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms810de	scope:	eq	version:	lw74.dn4.p272	Trust: 0.1
vendor:	lexmark	model:	ms811	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms812	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms812de	scope:	eq	version:	lw74.dn7.p272	Trust: 0.1
vendor:	lexmark	model:	ms817	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms818	scope:	eq	version:	lw74.dn2.p272	Trust: 0.1
vendor:	lexmark	model:	ms91x	scope:	eq	version:	lw74.sa.p272	Trust: 0.1
vendor:	lexmark	model:	mx31x	scope:	eq	version:	lw74.sb2.p272	Trust: 0.1
vendor:	lexmark	model:	mx410	scope:	eq	version:	lw74.sb4.p272	Trust: 0.1
vendor:	lexmark	model:	mx510	scope:	eq	version:	lw74.sb4.p272	Trust: 0.1
vendor:	lexmark	model:	mx511	scope:	eq	version:	lw74.sb4.p272	Trust: 0.1
vendor:	lexmark	model:	mx610	scope:	eq	version:	lw74.sb7.p272	Trust: 0.1
vendor:	lexmark	model:	mx611	scope:	eq	version:	lw74.sb7.p272	Trust: 0.1
vendor:	lexmark	model:	mx6500e	scope:	eq	version:	lw74.jd.p272	Trust: 0.1
vendor:	lexmark	model:	mx71x	scope:	eq	version:	lw74.tu.p272	Trust: 0.1
vendor:	lexmark	model:	mx81x	scope:	eq	version:	lw74.tu.p272	Trust: 0.1
vendor:	lexmark	model:	mx91x	scope:	eq	version:	lw74.mg.p272	Trust: 0.1
vendor:	lexmark	model:	t65x	scope:	eq	version:	lr.jp.p824	Trust: 0.1
vendor:	lexmark	model:	w850	scope:	eq	version:	lp.jb.p823	Trust: 0.1
vendor:	lexmark	model:	x46x	scope:	eq	version:	lr.bs.p824	Trust: 0.1
vendor:	lexmark	model:	x548	scope:	eq	version:	lhs60.vk.p737	Trust: 0.1
vendor:	lexmark	model:	x65x	scope:	eq	version:	lr.mn.p824	Trust: 0.1
vendor:	lexmark	model:	x73x	scope:	eq	version:	lr.fl.p824	Trust: 0.1
vendor:	lexmark	model:	x74x	scope:	eq	version:	lhs60.ny.p737	Trust: 0.1
vendor:	lexmark	model:	x792	scope:	eq	version:	lhs60.mr.p737	Trust: 0.1
vendor:	lexmark	model:	x86x	scope:	eq	version:	lp.sp.p823	Trust: 0.1
vendor:	lexmark	model:	x925	scope:	eq	version:	lhs60.hk.p737	Trust: 0.1
vendor:	lexmark	model:	x95x	scope:	eq	version:	lhs60.tq.p737	Trust: 0.1
vendor:	lexmark	model:	xc2130	scope:	eq	version:	lw74.gm4.p272	Trust: 0.1
vendor:	lexmark	model:	xc2132	scope:	eq	version:	lw74.gm7.p272	Trust: 0.1
vendor:	lexmark	model:	xm1135	scope:	eq	version:	lw74.sb2.p272	Trust: 0.1
vendor:	lexmark	model:	xm1140	scope:	eq	version:	lw74.sb4.p272	Trust: 0.1
vendor:	lexmark	model:	xm1145	scope:	eq	version:	lw74.sb4.p272	Trust: 0.1
vendor:	lexmark	model:	xm3150	scope:	eq	version:	lw74.sb7.p272	Trust: 0.1
vendor:	lexmark	model:	xm51xx	scope:	eq	version:	lw74.tu.p272	Trust: 0.1
vendor:	lexmark	model:	xm71xx	scope:	eq	version:	lw74.tu.p272	Trust: 0.1
vendor:	lexmark	model:	xm91x	scope:	eq	version:	lw74.mg.p272	Trust: 0.1
vendor:	lexmark	model:	xs548	scope:	eq	version:	lhs60.vk.p737	Trust: 0.1
vendor:	lexmark	model:	xs748	scope:	eq	version:	lhs60.ny.p737	Trust: 0.1
vendor:	lexmark	model:	xs79x	scope:	eq	version:	lhs60.mr.p737	Trust: 0.1
vendor:	lexmark	model:	xs925	scope:	eq	version:	lhs60.hk.p737	Trust: 0.1
vendor:	lexmark	model:	xs95x	scope:	eq	version:	lhs60.tq.p737	Trust: 0.1

sources: VULMON: CVE-2020-10094 // JVNDB: JVNDB-2020-004893 // NVD: CVE-2020-10094

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-10094
value:	MEDIUM
Trust: 1.0
NVD:	JVNDB-2020-004893
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202004-2246
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2020-10094
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2020-10094
severity:	LOW
baseScore:	3.5
vectorString:	AV:N/AC:M/AU:S/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	6.8
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	JVNDB-2020-004893
severity:	LOW
baseScore:	3.5
vectorString:	AV:N/AC:M/AU:S/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

nvd@nist.gov:	CVE-2020-10094
baseSeverity:	MEDIUM
baseScore:	5.4
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.3
impactScore:	2.7
version:	3.1
Trust: 1.0
NVD:	JVNDB-2020-004893
baseSeverity:	MEDIUM
baseScore:	5.4
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULMON: CVE-2020-10094 // JVNDB: JVNDB-2020-004893 // CNNVD: CNNVD-202004-2246 // NVD: CVE-2020-10094

PROBLEMTYPE DATA

problemtype:

CWE-79

Trust: 1.8

sources: JVNDB: JVNDB-2020-004893 // NVD: CVE-2020-10094

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202004-2246

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-202004-2246

CONFIGURATIONS

sources: JVNDB: JVNDB-2020-004893

PATCH

title:	Lexmark Security Advisory: Stored Cross Site Scripting Vulnerabilities (CVE-2020-10093, CVE-2020-10094)	url:	http://support.lexmark.com/index?page=content&id=TE936&locale=EN&userlocale=EN_US	Trust: 0.8
title:	Multiple Lexmark Fixes for product cross-site scripting vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=117736	Trust: 0.6

sources: JVNDB: JVNDB-2020-004893 // CNNVD: CNNVD-202004-2246

EXTERNAL IDS

db:	NVD	id:	CVE-2020-10094	Trust: 2.5
db:	JVNDB	id:	JVNDB-2020-004893	Trust: 0.8
db:	CNNVD	id:	CNNVD-202004-2246	Trust: 0.6
db:	VULMON	id:	CVE-2020-10094	Trust: 0.1

sources: VULMON: CVE-2020-10094 // JVNDB: JVNDB-2020-004893 // CNNVD: CNNVD-202004-2246 // NVD: CVE-2020-10094

REFERENCES

url:	http://support.lexmark.com/index?page=content&id=te936	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2020-10094	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-10094	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/79.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2020-10094 // JVNDB: JVNDB-2020-004893 // CNNVD: CNNVD-202004-2246 // NVD: CVE-2020-10094

SOURCES

db:	VULMON	id:	CVE-2020-10094
db:	JVNDB	id:	JVNDB-2020-004893
db:	CNNVD	id:	CNNVD-202004-2246
db:	NVD	id:	CVE-2020-10094

LAST UPDATE DATE

2024-11-23T22:51:27.771000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2020-10094	date:	2020-05-04T00:00:00
db:	JVNDB	id:	JVNDB-2020-004893	date:	2020-06-01T00:00:00
db:	CNNVD	id:	CNNVD-202004-2246	date:	2020-05-06T00:00:00
db:	NVD	id:	CVE-2020-10094	date:	2024-11-21T04:54:47.943

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2020-10094	date:	2020-04-28T00:00:00
db:	JVNDB	id:	JVNDB-2020-004893	date:	2020-06-01T00:00:00
db:	CNNVD	id:	CNNVD-202004-2246	date:	2020-04-28T00:00:00
db:	NVD	id:	CVE-2020-10094	date:	2020-04-28T14:15:14.017